← Back

CVE-2021-21983

nvd nist
Published: Mar 31, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.2 / Impact: 5.2
Source: NVD

Description

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

Affected (27)

Vmware
3 products
Cloud Foundation
Vrealize Operations Manager
Vrealize Suite Lifecycle Manager
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
Version 3.0.1.1
Cloud Foundation
Version 3.0.1
Cloud Foundation
Version 3.0
Cloud Foundation
Version 3.10
Cloud Foundation
Version 3.5.1
Cloud Foundation
Version 3.5
Cloud Foundation
Version 3.7.1
Cloud Foundation
Version 3.7.2
Cloud Foundation
Version 3.7
Cloud Foundation
Version 3.8.1
Cloud Foundation
Version 3.8
Cloud Foundation
Version 3.9.1
Cloud Foundation
Version 3.9
Cloud Foundation
Version 4.0.1
Cloud Foundation
Version 4.0
Vmware
Vrealize Operations Manager
Version 7.0.0
Vrealize Operations Manager
Version 7.5.0
Vrealize Operations Manager
Version 8.0.0
Vrealize Operations Manager
Version 8.0.1
Vrealize Operations Manager
Version 8.1.0
Vrealize Operations Manager
Version 8.1.1
Vrealize Operations Manager
Version 8.2.0
Vrealize Operations Manager
Version 8.3.0
Vmware
Vrealize Suite Lifecycle Manager
Version 8.0.1
Vrealize Suite Lifecycle Manager
Version 8.0
Vrealize Suite Lifecycle Manager
Version 8.1
Vrealize Suite Lifecycle Manager
Version 8.2

References (4)

Source: security@vmware.com
ExploitThird Party AdvisoryVDB Entry
Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.