CVE-2021-22005 PoC — Vmware VMware vCenter Server 路径遍历漏洞

Source

https://github.com/RedTeamExp/CVE-2021-22005_PoC

Associated Vulnerability

Title: Vmware VMware vCenter Server 路径遍历漏洞 (CVE-2021-22005)
Description:The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

Description

CVE-2021-22005_PoC

Readme

# CVE-2021-22005_PoC
CVE-2021-22005_PoC




getshell:
https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e


verify:
https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923_WEB_Vmware_vCenter_Server_FIleUpload_CVE-2021-20050.py

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →