daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2021/CVE-2021-21972.yaml

50 lines
2.0 KiB
YAML
Raw Normal View History

:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
id: CVE-2021-21972
info:
Dashboard Content Enhancements (#4338) Dashboard Content Enhancements
2022-05-09 16:12:52 +00:00
name: VMware vSphere Client (HTML5) - Remote Code Execution
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
author: dwisiswant0
severity: critical
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
description: VMware vCenter vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
remediation: |
Apply the necessary security patches or updates provided by VMware to mitigate this vulnerability.
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
reference:
- https://swarm.ptsecurity.com/unauth-rce-vmware/
Dashboard Content Enhancements (#4338) Dashboard Content Enhancements
2022-05-09 16:12:52 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-21972
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com>
2022-05-17 09:18:12 +00:00
- https://www.vmware.com/security/advisories/VMSA-2021-0002.html
- http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html
Added cve annotations + severity adjustments
2021-09-10 11:26:40 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
cvss-score: 9.8
Added cve annotations + severity adjustments
2021-09-10 11:26:40 +00:00
cve-id: CVE-2021-21972
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
cwe-id: CWE-22
templateman update
2023-10-14 11:27:55 +00:00
epss-score: 0.97413
TemplateMan Update [Fri Oct 27 16:34:45 UTC 2023] :robot:
2023-10-27 16:34:45 +00:00
epss-percentile: 0.99906
Updated 2021 CVEs
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: vmware
product: cloud_foundation
tags: cve2021,vmware,rce,vcenter,kev,packetstorm,cve
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
- method: GET
path:
- "{{BaseURL}}/ui/vropspluginui/rest/services/getstatus"
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
matchers-condition: and
matchers:
- type: word
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
part: header
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
words:
- "VSPHERE-UI-JSESSIONID"
fixing typos
2021-03-10 14:03:49 +00:00
condition: and
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
- type: regex
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
part: body
:fire: Add CVE-2021-21972
2021-02-25 00:37:02 +00:00
regex:
- "(Install|Config) Final Progress"
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
- type: status
status:
- 200
Auto Template Signing [Sat Oct 28 07:54:29 UTC 2023] :robot:
2023-10-28 07:54:29 +00:00
# digest: 4a0a004730450220626edd4b163fc40d1ebc4d8c7e8c1f2e20577e3e79d1b63f671faeca0c465ef6022100a8a0a7acc56d96ee6552d7a8a66cc981c96815f776ba56ece27dc5f8de9e7a45:922c64590222798bb761d5b6d8e72950