VULNERABILITY INTELLIGENCE

CVE-2021-21983

CVSS score6.5 MEDIUM

EPSS probability68.77%

CISA KEVNot currently listed

Published2021-03-31

Last modified2026-08-12

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

security@vmware.com — Exploit, Third Party Advisory, VDB Entry
security@vmware.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory