CVE-2021-21973 : The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulner

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

Published 2021-02-24 17:15:16

Updated 2024-02-15 20:18:09

Source VMware

View at NVD, CVE.org

Vulnerability category: Server-side request forgery (SSRF) Information leak

Products affected by CVE-2021-21973

Vmware » Vcenter Server » Version: 6.5 Update E
cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update C
cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update F
cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update B
cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update A
cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update D
cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update D
cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update A
cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update B
cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7
cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5
cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0
cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update A
cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update B
cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update C
cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update D
cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update1d
cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update1e
cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update1g
cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update2
cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update2b
cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update2c
cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update2d
cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update2g
cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update3
cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update3d
cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update3f
cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.5 Update Update3k
cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update1
cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update1b
cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update2
cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update2a
cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update2c
cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3
cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3a
cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3b
cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3f
cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3g
cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 6.7 Update Update3j
cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update Update1
cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*
Matching versions
Vmware » Vcenter Server » Version: 7.0 Update Update1a
cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*
Matching versions
Vmware » Cloud Foundation
Versions from including (>=) 4.0 and before (<) 4.2
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
Matching versions
Vmware » Cloud Foundation
Versions from including (>=) 3.0 and before (<) 3.10.1.2
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
Matching versions

CVE-2021-21973 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2021-21973

Added on 2022-03-07 Action due date 2022-03-21

Exploit prediction scoring system (EPSS) score for CVE-2021-21973

EPSS FAQ

12.55%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-21973

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2021-21973

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-21973

https://www.vmware.com/security/advisories/VMSA-2021-0002.html

VMSA-2021-0002
Vendor Advisory

CVEs referencing this url