CVE-2021-21980 - Vulnerability Details

Vendors	Products
Vmware	Cloud Foundation Vcenter Server

Link	Providers
https://www.vmware.com/security/advisories/VMSA-2021-0027.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "VMware vCenter Server and VMware Cloud Foundation", "vendor": "n/a", "versions": [{"status": "affected", "version": "VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x"}]}], "descriptions": [{"lang": "en", "value": "The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information."}], "problemTypes": [{"descriptions": [{"description": "Arbitrary file read vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-11-24T16:32:43", "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@vmware.com", "ID": "CVE-2021-21980", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "VMware vCenter Server and VMware Cloud Foundation", "version": {"version_data": [{"version_value": "VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Arbitrary file read vulnerability"}]}]}, "references": {"reference_data": [{"name": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html", "refsource": "MISC", "url": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T18:30:23.351Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html"}]}]}, "cveMetadata": {"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "assignerShortName": "vmware", "cveId": "CVE-2021-21980", "datePublished": "2021-11-24T16:32:43", "dateReserved": "2021-01-04T00:00:00", "dateUpdated": "2024-08-03T18:30:23.351Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : VMware vCenter Server and VMware Cloud Foundation (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Arbitrary file read vulnerability (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-11-24T16:32:43 (string)

orgId : dcf2e128-44bd-42ed-91e8-88f912c1401d (string)

shortName : vmware (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security@vmware.com (string)

ID : CVE-2021-21980 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : VMware vCenter Server and VMware Cloud Foundation (string)

version : { »

version_data : [ »

0 : { »

version_value : VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Arbitrary file read vulnerability (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

refsource : MISC (string)

url : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T18:30:23.351Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : dcf2e128-44bd-42ed-91e8-88f912c1401d (string)

assignerShortName : vmware (string)

cveId : CVE-2021-21980 (string)

datePublished : 2021-11-24T16:32:43 (string)

dateReserved : 2021-01-04T00:00:00 (string)

dateUpdated : 2024-08-03T18:30:23.351Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:*", "matchCriteriaId": "B4EACDFF-B042-4AC9-A87E-D8F27F7BBDAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*", "matchCriteriaId": "23CFE5A5-A166-4FD5-BE97-5F16DAB1EAE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:*", "matchCriteriaId": "15255D34-EA1C-4ECC-A42B-BF30C76CD0E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:*", "matchCriteriaId": "AAC2EF17-99FB-4619-A093-8DA02311DE35", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:*", "matchCriteriaId": "A6C763C8-8B5D-4219-98BB-FBCF544F5373", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:*", "matchCriteriaId": "8C7AB0A5-FCA4-4782-875B-C5C3F08C3C5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:*", "matchCriteriaId": "8E75F600-0799-42BD-91A9-1742E86DAE7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:*", "matchCriteriaId": "C5F819AB-DDDA-49CE-ABF8-0766E8FC214E", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:*", "matchCriteriaId": "9087A90E-54B9-483D-B673-21C57B44706C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:*", "matchCriteriaId": "9237FAA7-E07F-47F1-A518-9C693EE3DA36", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:*", "matchCriteriaId": "FCB2E419-6088-423E-9CF3-878FBA365759", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:*", "matchCriteriaId": "572463FF-3FDF-4A0B-B46A-21633BF68575", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:*", "matchCriteriaId": "F5F5B72F-CB59-41EB-87DF-C1C023BD2E1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:*", "matchCriteriaId": "84DCDFB0-E4B0-4B26-BB26-E08D278591AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:*", "matchCriteriaId": "EBD703BC-39D0-4F7B-B210-790430C8622E", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:*", "matchCriteriaId": "97A33095-C15B-46EF-A817-0783329A83FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:*", "matchCriteriaId": "A11BB22E-5787-4335-8A54-DDBC36D5A3CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:*", "matchCriteriaId": "1C4A270B-D8F3-4582-B0F2-6BE1EC9F47A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:*", "matchCriteriaId": "517936D0-0FBA-45A2-B5FE-EBB14939E171", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:*", "matchCriteriaId": "7F3EF498-E22C-44BE-9A66-5C2DE2ABB696", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*", "matchCriteriaId": "E456F84C-A86E-4EA9-9A3E-BEEA662136E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:*", "matchCriteriaId": "D7D1387A-B6E1-4CB0-9E7A-44856CE6BA8B", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:*", "matchCriteriaId": "514A54F8-BC3C-4086-AF36-5F04CF15F263", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:*", "matchCriteriaId": "B5BB7E8F-395F-4222-8F02-27A40490A588", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:*", "matchCriteriaId": "B44735EC-9EEC-46E6-BD2E-1AA73A3D4632", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:*", "matchCriteriaId": "DB137E84-2F63-400E-9936-F1E313245B6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:*", "matchCriteriaId": "68F0E573-C385-481F-8829-12FBE9269B93", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:*", "matchCriteriaId": "CAA1C918-B449-4964-820B-9702E6EEDC9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:*", "matchCriteriaId": "2DA3AC16-8836-41DD-98C5-00B2FF0A7B6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:*", "matchCriteriaId": "15FE3165-7056-46BC-88FD-66F033C24505", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:*", "matchCriteriaId": "D992B2FF-7F91-4BA3-97E2-ABEDC48940F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:*", "matchCriteriaId": "66E9E563-D0C3-4595-88A6-FD611C0AFC01", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:*", "matchCriteriaId": "EF7D724D-CC0F-4E60-8E86-4875F3077C56", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:*", "matchCriteriaId": "218878C7-8759-47EA-97AF-286D5062812C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:*", "matchCriteriaId": "0E92E11F-44FE-481C-9212-B0EE45B128A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:*", "matchCriteriaId": "7494090C-C5E4-46E9-8222-6096731FC7C7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information."}, {"lang": "es", "value": "El cliente web de vSphere (FLEX/Flash), contiene una vulnerabilidad de lectura arbitraria de archivos no autorizada. Un actor malicioso con acceso a la red al puerto 443 en vCenter Server puede explotar este problema para conseguir acceso a informaci\u00f3n confidencial"}], "id": "CVE-2021-21980", "lastModified": "2024-11-21T05:49:21.820", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-11-24T17:15:07.623", "references": [{"source": "security@vmware.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2021-0027.html"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:* (string)

matchCriteriaId : B4EACDFF-B042-4AC9-A87E-D8F27F7BBDAE (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* (string)

matchCriteriaId : 23CFE5A5-A166-4FD5-BE97-5F16DAB1EAE0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:* (string)

matchCriteriaId : 15255D34-EA1C-4ECC-A42B-BF30C76CD0E7 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:* (string)

matchCriteriaId : AAC2EF17-99FB-4619-A093-8DA02311DE35 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:* (string)

matchCriteriaId : A6C763C8-8B5D-4219-98BB-FBCF544F5373 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:* (string)

matchCriteriaId : 8C7AB0A5-FCA4-4782-875B-C5C3F08C3C5C (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:* (string)

matchCriteriaId : 8E75F600-0799-42BD-91A9-1742E86DAE7E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:* (string)

matchCriteriaId : C5F819AB-DDDA-49CE-ABF8-0766E8FC214E (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:* (string)

matchCriteriaId : 9087A90E-54B9-483D-B673-21C57B44706C (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:* (string)

matchCriteriaId : 9237FAA7-E07F-47F1-A518-9C693EE3DA36 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:* (string)

matchCriteriaId : FCB2E419-6088-423E-9CF3-878FBA365759 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:* (string)

matchCriteriaId : 572463FF-3FDF-4A0B-B46A-21633BF68575 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:* (string)

matchCriteriaId : F5F5B72F-CB59-41EB-87DF-C1C023BD2E1C (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:* (string)

matchCriteriaId : 84DCDFB0-E4B0-4B26-BB26-E08D278591AB (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:* (string)

matchCriteriaId : EBD703BC-39D0-4F7B-B210-790430C8622E (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:* (string)

matchCriteriaId : 97A33095-C15B-46EF-A817-0783329A83FD (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:* (string)

matchCriteriaId : A11BB22E-5787-4335-8A54-DDBC36D5A3CD (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:* (string)

matchCriteriaId : 1C4A270B-D8F3-4582-B0F2-6BE1EC9F47A2 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:* (string)

matchCriteriaId : 517936D0-0FBA-45A2-B5FE-EBB14939E171 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:* (string)

matchCriteriaId : 7F3EF498-E22C-44BE-9A66-5C2DE2ABB696 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* (string)

matchCriteriaId : E456F84C-A86E-4EA9-9A3E-BEEA662136E6 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:* (string)

matchCriteriaId : D7D1387A-B6E1-4CB0-9E7A-44856CE6BA8B (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:* (string)

matchCriteriaId : 514A54F8-BC3C-4086-AF36-5F04CF15F263 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:* (string)

matchCriteriaId : B5BB7E8F-395F-4222-8F02-27A40490A588 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:* (string)

matchCriteriaId : B44735EC-9EEC-46E6-BD2E-1AA73A3D4632 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:* (string)

matchCriteriaId : DB137E84-2F63-400E-9936-F1E313245B6C (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:* (string)

matchCriteriaId : 68F0E573-C385-481F-8829-12FBE9269B93 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:* (string)

matchCriteriaId : CAA1C918-B449-4964-820B-9702E6EEDC9A (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:* (string)

matchCriteriaId : 2DA3AC16-8836-41DD-98C5-00B2FF0A7B6E (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:* (string)

matchCriteriaId : 15FE3165-7056-46BC-88FD-66F033C24505 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:* (string)

matchCriteriaId : D992B2FF-7F91-4BA3-97E2-ABEDC48940F8 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:* (string)

matchCriteriaId : 66E9E563-D0C3-4595-88A6-FD611C0AFC01 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:* (string)

matchCriteriaId : EF7D724D-CC0F-4E60-8E86-4875F3077C56 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:* (string)

matchCriteriaId : 218878C7-8759-47EA-97AF-286D5062812C (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:* (string)

matchCriteriaId : 0E92E11F-44FE-481C-9212-B0EE45B128A2 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:* (string)

matchCriteriaId : 7494090C-C5E4-46E9-8222-6096731FC7C7 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. (string)

}

1 : { »

lang : es (string)

value : El cliente web de vSphere (FLEX/Flash), contiene una vulnerabilidad de lectura arbitraria de archivos no autorizada. Un actor malicioso con acceso a la red al puerto 443 en vCenter Server puede explotar este problema para conseguir acceso a información confidencial (string)

}

]

id : CVE-2021-21980 (string)

lastModified : 2024-11-21T05:49:21.820 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-11-24T17:15:07.623 (string)

references : [ »

0 : { »

source : security@vmware.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2021-0027.html (string)

}

]

sourceIdentifier : security@vmware.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object