1007 matches found
Arbitrary file deletion
Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
CVE-2021-21975
Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...
CVE-2021-21975
Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...
CVE-2021-21975
The VMware vRealize Operations Manager API (versions 8.4 and all prior ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability (CVE-2021-21975 ). A malicious actor with network access can exploit this to steal administrative credentials or access internal resources. When combined wi...
CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
CVE-2021-21983
CVE-2021-21983 is an authenticated arbitrary file write vulnerability in the VMware vRealize Operations Manager API (pre-8.4). A network‑accessible attacker can leverage the API to write files to arbitrary locations on the underlying Photon OS, potentially enabling code execution as illustrated i...
Exploit for Server-Side Request Forgery in Vmware Cloud_Foundation
CVE-2021-21975 SSRF-POC - ssrf to cred leak First configur...
CVE-2021-21983: Undefined Security Weakness
Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...
CVE-2021-21975
Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials. Recent assessments: wvu-r7 at Mar...
CVE-2021-21975: Server-Side Request Forgery (SSRF)
Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...
VMware vRealize Operations Manager SSRF和文件读取漏洞（CVE-2021-21975 CVE-2021-21983）
Description On March 30, 2021, VMware published a security advisory for CVE-2021-21975 and CVE-2021-21983, two chainable vulnerabilities in its vRealize Operations Manager product. CVE-2021-21975 is an unauthenticated server-side request forgery SSRF, while CVE-2021-21983 is an authenticated...
VMware vRealize Operations Manager 7.5.x / 8.x Multiple Vulnerabilities (VMSA-2021-0004)
The version of VMware vRealize Operations vROps Manager running on the remote web server is 7.5.x prior to 7.5.0.17771878, 8.0.0 prior to 8.0.1.17771851, or 8.1.0 prior to 8.1.1.17772462 or 8.2.0 prior to 8.2.0.17771778 or 8.3.0 prior to 8.3.0.17787340. It is, therefore, affected by a multiple...
VMware vRealize Operations (vROps) Manager SSRF RCE
This module exploits a pre-auth SSRF CVE-2021-21975 and post-auth file write CVE-2021-21983 in VMware vRealize Operations Manager to leak admin creds and write/execute a JSP payload. CVE-2021-21975 affects the /casa/nodes/thumbprints endpoint, and CVE-2021-21983 affects the...
CVE-2021-1728
System Center Operations Manager Elevation of Privilege Vulnerability...
CVE-2021-1728
System Center Operations Manager Elevation of Privilege Vulnerability...
CVE-2021-1728
System Center Operations Manager Elevation of Privilege Vulnerability...
Privilege escalation
System Center Operations Manager Elevation of Privilege Vulnerability...
CVE-2021-1728 System Center Operations Manager Elevation of Privilege Vulnerability
...
CVE-2021-1728
CVE-2021-1728 affects Microsoft System Center Operations Manager (SCOM) and is described as an Elevation of Privilege vulnerability. The CVE entry notes a high severity (CVSS v3.1 base 8.8) with a network attack vector, low privileges required, no user interaction, and impact to confidentiality, ...