CVEvulnerability

CVE-2021-21983

6.5 MEDIUM Published 2021-03-31 Modified 2026-08-12 Official page ↗
Status
Modified
Published
2021-03-31
Last modified
2026-08-12
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:L/Au:S/C:N/I:C/A:C

Description

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

Affected configurations

• vmware cloud foundation 3.0 • vmware cloud foundation 3.0.1 • vmware cloud foundation 3.0.1.1 • vmware cloud foundation 3.5 • vmware cloud foundation 3.5.1 • vmware cloud foundation 3.7 • vmware cloud foundation 3.7.1 • vmware cloud foundation 3.7.2 • vmware cloud foundation 3.8 • vmware cloud foundation 3.8.1 • vmware cloud foundation 3.9 • vmware cloud foundation 3.9.1 • vmware cloud foundation 3.10 • vmware cloud foundation 4.0 • vmware cloud foundation 4.0.1 • vmware vrealize operations manager 7.0.0 • vmware vrealize operations manager 7.5.0 • vmware vrealize operations manager 8.0.0 • vmware vrealize operations manager 8.0.1 • vmware vrealize operations manager 8.1.0 • vmware vrealize operations manager 8.1.1 • vmware vrealize operations manager 8.2.0 • vmware vrealize operations manager 8.3.0 • vmware vrealize suite lifecycle manager 8.0 • vmware vrealize suite lifecycle manager 8.0.1 • vmware vrealize suite lifecycle manager 8.1 • vmware vrealize suite lifecycle manager 8.2

References