CVE-2021-21980
En bref Sévérité Non disponible EPSS EPSS 4.67 % · centile 92 (2026-10-27) État PUBLISHED Publiée 2021-11-24 Mise à jour 2024-08-03 Attribuée par vmware Statut NVD Modified Description The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:vmware:cloud_foundation:3.0:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1e:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_1g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_2b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_2d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_2g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3k:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3n:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3p:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.5:update_3q:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_1b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_2a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3j:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3l:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3m:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3n:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:6.7:update_3o:*:*:*:*:*:*Produits affectés
Références
Sources
