CVE-2021-21980 PoC — VMware vCenter Server 信息泄露漏洞

Source

https://github.com/Osyanina/westone-CVE-2021-21980-scanner

Associated Vulnerability

Title: VMware vCenter Server 信息泄露漏洞 (CVE-2021-21980)
Description:The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

Description

A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.

Readme

# westone-CVE-2021-21980-scanner   
VMware vCenter earlier versions (7.0.2.00100) has unauthorized arbitrary file read + ssrf + xss vulnerability
# Installation & Usage  
git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git  
cd westone-CVE-2021-21980-scanner  
cmd CVE-2021-21980.exe

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →