| शीर्षक | Unauthorized RCE in VMware vCenter |
|---|
| विवरण | Written by Mikhail Klyuchnikov on February 24, 2021
In fall of 2020, I discovered couple vulnerabilities in the vSphere Client component of VMware vCenter. These vulnerabilities allowed non-authorized clients to execute arbitrary commands and send requests on behalf of the targeted server via various protocols:
- Unauthorized file upload leading to remote code execution (RCE) (CVE-2021- 21972)
- An unauthorized server-side request forgery (SSRF) vulnerabilities (CVE-2021-21973) |
|---|
| स्रोत | ⚠️ https://swarm.ptsecurity.com/unauth-rce-vmware/ |
|---|
| उपयोगकर्ता | misc (UID 3) |
|---|
| सबमिशन | 24/02/2021 09:43 PM (6 साल पहले) |
|---|
| संयम | 25/02/2021 06:52 AM (9 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 170378 [VMware vCenter Server/Cloud Foundation vSphere Client अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|