CVE-2021-21973

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-07

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-21973

⌖ exploited in the wild shame 50/100 exploited-in-wild

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Players implicated

VMware, Inc. · vendor vCenter Server and Cloud Foundation · product

Description

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Affected FedRAMP products 2 in the catalog

Product	Provider	Status	Match
VMware Government Services (VGS)	VMware, Inc.	Authorized	vendor-exact · 0.90
Workspace ONE	VMware, Inc.	Authorized	vendor-exact · 0.90