Medium · published March 31, 2021
CVSS calls it medium at 6.5. It sits in the 99.3th percentile for exploit probability.
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
| Product | Versions | Fixed in |
|---|---|---|
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/cloud_foundation | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_operations_manager | all versions | — |
| vmware/vrealize_suite_lifecycle_manager | all versions | — |
| vmware/vrealize_suite_lifecycle_manager | all versions | — |
| vmware/vrealize_suite_lifecycle_manager | all versions | — |
| vmware/vrealize_suite_lifecycle_manager | all versions | — |