CVE-2021-22006 PoC — Vmware VMware vCenter Server 授权问题漏洞

Source

https://github.com/CrackerCat/CVE-2021-22006

Associated Vulnerability

Title: Vmware VMware vCenter Server 授权问题漏洞 (CVE-2021-22006)
Description:The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to access restricted endpoints.

Description

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

Readme

# CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
#### Analyze

![1632587348859](img/1632587348859.png)

![1632587404058](img/1632587404058.png)

![1632587421261](img/1632587421261.png)

#### Usage

```
-------------------------------------------------------------
[*] CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
[*] Github: https://github.com/r0ckysec
[*] Twitter: https://twitter.com/r0cky6861636b
[*] Author: r0cky
-------------------------------------------------------------


Usage: ./cve-2021-22005_exp -u <http://target>

Optional Arguments:
  -h help         Show This Help Message And Exit
  -u url          Will Send Payload To Target URL
  -s shell        One-click GetShell
  -p proxy        Specific Request Proxy
```



##### GetShell

![1632587653344](img/1632587653344.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →