CVE-2021-21975 PoC — VMware vRealize Operations 代码问题漏洞

Source

https://github.com/GuayoyoCyber/CVE-2021-21975

Associated Vulnerability

Title: VMware vRealize Operations 代码问题漏洞 (CVE-2021-21975)
Description:Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

Description

Nmap script to check vulnerability CVE-2021-21975

Readme

# CVE-2021-21975
Nmap script to check vulnerability CVE-2021-21975

## Vulnerability References:

https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975

https://www.vmware.com/security/advisories/VMSA-2021-0004.html

## Blog
https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber

## Example

nmap -p443 --script cve-2021-21975.nse --script-args vulns.showall IP

![CVE-2021-21975](https://user-images.githubusercontent.com/63943179/113367112-8fca1c00-9331-11eb-918a-18cd14ef0e8e.gif)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →