Vulnerabilities fixed in VMware vRealize

VMware has fixed vulnerabilities in vRealize. A malicious person with access to the vRealize Operations Manager API could potentially exploit the vulnerabilities potentially exploit them to obtain sensitive data via accessing log files and arbitrary files, potentially possibly taking over a user...

PT-2021-4135

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager API versions 8.x prior to 8.5 Description The issue is related to a Server Side Request Forgery in an endpoint of the vRealize Operations Manager API. An unauthenticated malicious actor with network access can perfo...

PT-2021-4134

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager versions 8.x prior to 8.5 Description The issue is related to a broken access control vulnerability in the vRealize Operations Manager API, allowing unauthenticated API access. An unauthenticated malicious actor wit...

PT-2021-4136

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager API versions 8.x prior to 8.5 Description The issue concerns a Server Side Request Forgery in an endpoint of the vRealize Operations Manager API. An unauthenticated malicious actor with network access can perform a...

PT-2021-4132

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager API versions 8.x prior to 8.5 Description The issue is related to an arbitrary file read vulnerability in the vRealize Operations Manager API. A malicious actor with administrative access can read any arbitrary file...

PT-2021-4209

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager API versions 8.x prior to 8.5 Description The issue is related to an insecure object reference vulnerability in the vRealize Operations Manager API. This vulnerability can be exploited by a malicious actor with...

PT-2021-4133

Name of the Vulnerable Software and Affected Versions vRealize Operations Manager versions 8.x prior to 8.5 Description The issue is related to insufficient validation of incoming requests, which can allow a remote attacker to disclose sensitive information. An unauthenticated malicious actor wit...

VulnCheck KEV: CVE-2021-21975

Server Side Request Forgery SSRF in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials...

Metasploit Wrap-Up

Operations shell Operations and management software make popular targets due to their users typically having elevated privileges across a network. Our own wvu contributed the VMware vRealize Operations vROps Manager SSRF RCE exploit module for the vulnerabilities discovered by security researcher...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware vRealize Operations vROps Manager SSRF RCE', 'Description' = %q This module exploits a pre-auth SSRF CVE-2021-21975 and post-auth file wri...

Exploit for Server-Side Request Forgery in Vmware Cloud_Foundation

VMWare-CVE-2021-21975 VMWare-CVE-2021-21975 SSRF vulnerabil...

Critical Auth Bypass Bug Found in VMware Data Center Security Product

A critical vulnerability in the VMware Carbon Black Cloud Workload appliance could be exploited to bypass authentication and take control of vulnerable systems. Tracked as CVE-2021-21982, the flaw is rated 9.1 out of a maximum of 10 in the CVSS scoring system and affects all versions of the produ...

CVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...

CVE-2021-21975

Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...

Arbitrary file deletion

Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...

CVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...

Server side request forgery (ssrf)

Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...

CVE-2021-21975

Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...

CVE-2021-21975

Server Side Request Forgery in vRealize Operations Manager API CVE-2021-21975 prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials...

CVE-2021-21975

The VMware vRealize Operations Manager API (versions 8.4 and all prior ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability (CVE-2021-21975 ). A malicious actor with network access can exploit this to steal administrative credentials or access internal resources. When combined wi...