Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
vmwareVMwareVMSA-2021-0010
HistoryMay 25, 2021 - 12:00 a.m.

VMware vCenter Server updates address remote code execution and authentication vulnerabilities (CVE-2021-21985, CVE-2021-21986)

2021-05-2500:00:00
www.vmware.com
62

0.974 High

EPSS

Percentile

99.9%

JSON

3a. VMware vCenter Server updates address remote code execution vulnerability in the vSphere Client (CVE-2021-21985)

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

3b. Authentication mechanism issue in vCenter Server Plug-ins (CVE-2021-21986)

The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.5.

References

Related

trellix 2
nessus 2
threatpost 3
thn 3
cve 2
nvd 2
nuclei 1
cvelist 2
checkpoint_advisories 1
githubexploit 9
cisa_kev 1
prion 2
cisa 1
metasploit 1
seebug 1
rapid7blog 3
packetstorm 1
zdt 1
attackerkb 1
ibm 1
avleonov 1
qualysblog 2
ics 2
trellix
trellix
Are Virtual Machines the New Gold for Cyber Criminals?
2021-06-10 00:00:00
Are Virtual Machines the New Gold for Cyber Criminals?
2021-06-10 00:00:00
nessus
nessus
VMware vCenter Server 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2021-0010)
2021-05-25 00:00:00
VMware vCenter Server Virtual SAN Health Check plug-in RCE (CVE-2021-21985) (direct check)
2021-06-03 00:00:00
threatpost
threatpost
VMware Sounds Ransomware Alarm Over Critical Severity Bug
2021-05-26 19:45:50
New Ransomware Gangs Haron & BlackMatter Are After Fat Cats
2021-07-28 18:33:02
CISAโ€™s Top 30 Bugs: Oneโ€™s Old Enough to Buy Beer
2021-07-29 18:39:56
thn
thn
Critical RCE Vulnerability Found in VMware vCenter Server โ€” Patch Now!
2021-05-26 04:57:00
ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack
2021-06-05 10:58:00
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
2021-07-29 08:21:00
cve
cve
CVE-2021-21986
2021-05-26 15:15:07
CVE-2021-21985
2021-05-26 15:15:07
nvd
nvd
CVE-2021-21986
2021-05-26 15:15:07
CVE-2021-21985
2021-05-26 15:15:07
nuclei
nuclei
VMware vSphere Client (HTML5) - Remote Code Execution
2021-05-31 13:50:59
cvelist
cvelist
CVE-2021-21985
2021-05-26 14:04:30
CVE-2021-21986
2021-05-26 14:04:35
checkpoint_advisories
checkpoint_advisories
VMware vCenter Server Remote Code Execution (CVE-2021-21985)
2021-06-08 00:00:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-06-03 12:17:06
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-07-11 20:38:19
Exploit for Improper Input Validation in Vmware Vcenter Server
2021-11-09 19:06:29
cisa_kev
cisa_kev
VMware vCenter Server Improper Input Validation Vulnerability
2021-11-03 00:00:00
prion
prion
Remote code execution
2021-05-26 15:15:00
Design/Logic Flaw
2021-05-26 15:15:00
cisa
cisa
Unpatched VMware vCenter Software
2021-06-04 00:00:00
metasploit
metasploit
VMware vCenter Server Virtual SAN Health Check Plugin RCE
2021-07-12 18:07:05
seebug
seebug
VMware vCenter Server่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒๆผๆดž๏ผˆCVE-2021-21985๏ผ‰
2021-05-26 00:00:00
rapid7blog
rapid7blog
CVE-2021-21985: What you need to know about the latest critical vCenter Server vulnerability
2021-05-26 18:57:20
Metasploit Wrap-Up
2021-07-16 19:47:06
Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)
2021-09-21 19:55:35
packetstorm
packetstorm
VMware vCenter Server Virtual SAN Health Check Remote Code Execution
2021-07-13 00:00:00
zdt
zdt
VMware vCenter Server Virtual SAN Health Check Remote Code Execution Exploit
2021-07-16 00:00:00
attackerkb
attackerkb
CVE-2021-21985
2021-05-26 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in VMware vCenter affect IBM Cloud Pak System
2022-05-06 21:11:34
avleonov
avleonov
Last Weekโ€™s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins
2021-07-19 16:29:00
qualysblog
qualysblog
CISA Alert: Top Routinely Exploited Vulnerabilities
2021-07-29 00:20:27
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
ics
ics
Top Routinely Exploited Vulnerabilities
2021-08-20 12:00:00
2021 Top Routinely Exploited Vulnerabilities
2022-04-28 12:00:00

0.974 High

EPSS

Percentile

99.9%

JSON
Related for VMSA-2021-0010
trellix2nessus2threatpost3thn3cve2nvd2nuclei1cvelist2checkpoint_advisories1githubexploit9cisa_kev1prion2cisa1metasploit1seebug1rapid7blog3packetstorm1zdt1attackerkb1ibm1avleonov1qualysblog2ics2