Lucene search

[email protected]NVD:CVE-2021-21980

HistoryNov 24, 2021 - 5:15 p.m.

CVE-2021-21980

2021-11-2417:15:07

[email protected]

web.nvd.nist.gov

vsphere web client

file read

vulnerability

port 443

vcenter server

sensitive information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

58.9%

JSON

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

Affected configurations

Nvd

Node

vmwarecloud_foundationMatch3.0-

vmwarevcenter_serverMatch6.5-

vmwarevcenter_serverMatch6.5update_1

vmwarevcenter_serverMatch6.5update_1b

vmwarevcenter_serverMatch6.5update_1c

vmwarevcenter_serverMatch6.5update_1d

vmwarevcenter_serverMatch6.5update_1e

vmwarevcenter_serverMatch6.5update_1g

vmwarevcenter_serverMatch6.5update_2

vmwarevcenter_serverMatch6.5update_2b

vmwarevcenter_serverMatch6.5update_2c

vmwarevcenter_serverMatch6.5update_2d

vmwarevcenter_serverMatch6.5update_2g

vmwarevcenter_serverMatch6.5update_3

vmwarevcenter_serverMatch6.5update_3d

vmwarevcenter_serverMatch6.5update_3f

vmwarevcenter_serverMatch6.5update_3k

vmwarevcenter_serverMatch6.5update_3n

vmwarevcenter_serverMatch6.5update_3p

vmwarevcenter_serverMatch6.5update_3q

vmwarevcenter_serverMatch6.7-

vmwarevcenter_serverMatch6.7update_1

vmwarevcenter_serverMatch6.7update_1b

vmwarevcenter_serverMatch6.7update_2

vmwarevcenter_serverMatch6.7update_2a

vmwarevcenter_serverMatch6.7update_2c

vmwarevcenter_serverMatch6.7update_3

vmwarevcenter_serverMatch6.7update_3a

vmwarevcenter_serverMatch6.7update_3b

vmwarevcenter_serverMatch6.7update_3f

vmwarevcenter_serverMatch6.7update_3g

vmwarevcenter_serverMatch6.7update_3j

vmwarevcenter_serverMatch6.7update_3l

vmwarevcenter_serverMatch6.7update_3m

vmwarevcenter_serverMatch6.7update_3n

vmwarevcenter_serverMatch6.7update_3o

VendorProductVersionCPE
vmwarecloud_foundation3.0cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:*
vmwarevcenter_server6.5cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:*

Vendor	Product	Version	CPE
vmware	cloud_foundation	3.0	cpe:2.3:a:vmware:cloud_foundation:3.0:-::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:-::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1b::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1c::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1d::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1e::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_1g::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_2::::::
vmware	vcenter_server	6.5	cpe:2.3:a:vmware:vcenter_server:6.5:update_2b::::::