CVE-2021-21975—VMware Server Side Request Forgery in vRealize Operations Manager API

漏洞名称

VMware Server Side Request Forgery in vRealize Operations Manager API

描述

Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-21975

相关 CWE

• CWE-918