by Kastro
Paper/Archive/CVE-2021-21984

CVE-2021-21984

vmware — VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.5.805 × 2016.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance.

Affected

ProductAffectedFixed inSource
VMware vRealize Business for CloudVMware vRealize Business for Cloud (7.x prior to 7.6.0)–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refvmware.com/security/advisories/VMSA-2021-0007.html