CVE-2021-21983

2021-03-3117:50:36

vmware

www.cve.org

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

CNA Affected

[
  {
    "product": "VMware vRealize Operations",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vRealize Operations prior to 8.4"
      }
    ]
  }
]