VMware Server Side Request Forgery in vRealize Operations Manager API. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 18/01/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundation | = 3.0= 3.0.1= 3.0.1.1= 3.10= 3.5= 3.5.1= 3.7= 3.7.1= 3.7.2= 3.8= 3.8.1= 3.9= 3.9.1= 4.0= 4.0.1 | |
| vrealize operations manager | = 7.0.0= 7.5.0= 8.0.0= 8.0.1= 8.1.0= 8.1.1= 8.2.0= 8.3.0 | |
| vrealize suite lifecycle manager | = 8.0= 8.0.1= 8.1= 8.2 |
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free