CVE-2021-21973—VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

漏洞名称

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

描述

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-21973

相关新闻文章

• Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber AttackMarch 12, 2025

相关 CWE

• CWE-20
• CWE-918