CVE-2021-21975 PoC — VMware vRealize Operations 代码问题漏洞

Source

https://github.com/GuayoyoCyber/CVE-2021-21975

Associated Vulnerability

Title:VMware vRealize Operations 代码问题漏洞 (CVE-2021-21975)
Description:Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

Description

Nmap script to check vulnerability CVE-2021-21975

Readme

# CVE-2021-21975
Nmap script to check vulnerability CVE-2021-21975

## Vulnerability References:

https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975

https://www.vmware.com/security/advisories/VMSA-2021-0004.html

## Blog
https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber

## Example

nmap -p443 --script cve-2021-21975.nse --script-args vulns.showall IP

![CVE-2021-21975](https://user-images.githubusercontent.com/63943179/113367112-8fca1c00-9331-11eb-918a-18cd14ef0e8e.gif)

File Snapshot


 [4.0K]  /data/pocs/ed60e04bbbba9003458d5975ee2bee7dbe3728e5
├── [4.4K]  cve-2021-21975.nse
├── [ 11K]  LICENSE
└── [ 541]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!