Lucene search
PRIOn knowledge basePRION:CVE-2021-21993HistorySep 23, 2021 - 12:15 p.m.
Server side request forgery (ssrf)
2021-09-2312:15:00
PRIOn knowledge base
www.prio-n.com
3
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_foundation | ge | 3.0 | |
| cloud_foundation | lt | 5.0 | |
| vcenter_server | eq | 6.5 | |
| vcenter_server | eq | 6.7 | |
| vcenter_server | eq | 7.0 |
Related
nvd
nvd
CVE-2021-21993
2021-09-23 12:15:07
cve
cve
CVE-2021-21993
2021-09-23 12:15:07
cvelist
cvelist
CVE-2021-21993
2021-09-23 11:37:24
cnvd
cnvd
VMware vCenter Server Server-Side Request Forgery Vulnerability
2021-09-24 00:00:00
nessus
nessus
VMware vCenter Server < 6.5 U3q Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
VMware vCenter Server < 7.0 U2c Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
VMware vCenter Server < 6.7 Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
ibm
ibm
vmware
vmware
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
thn
thn
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
2021-09-22 03:09:00