cve-2021-21983

MEDIUM CVSS 6.5 nvd
Description

Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.

Timeline
Published
2021-03-31
Last Modified
2026-08-12
CVSS Details
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
Affected Products
  • vmware cloud_foundation
  • vmware vrealize_operations_manager
  • vmware vrealize_suite_lifecycle_manager
CVSS metrics
Version Base Severity Vector Exploitability Impact Source
3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 1.2 5.2 nvd@nist.gov
2.0 8.5 HIGH AV:N/AC:L/Au:S/C:N/I:C/A:C 8.0 9.2 nvd@nist.gov
CPE configurations
OR
CPE Version range Vulnerable
cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:7.0.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:* — yes
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:* — yes
NVD metadata
NVD status
Modified
Source identifier
security@vmware.com
References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 6.5,
  "datePublished": "2021-03-31T18:15:14.723",
  "dateUpdated": "2026-08-12T05:17:36.347",
  "description": "Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.",
  "id": "CVE-2021-21983",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "VMware vRealize Operations",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "VMware vRealize Operations prior to 8.4"
              }
            ]
          }
        ],
        "source": "security@vmware.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BEACD8D-30EF-44FE-839B-DA69E6CED23A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "36847AD6-88CC-4228-AB4E-5161B381267C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "6FC3C214-DEFC-48D9-8728-31F19095375E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "0BF5CF56-8DE1-42F5-9EC1-E5666DD7FA59",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "36668618-33C3-460A-879B-A9741405C9D0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "8266FD66-3BB6-4720-9D9F-06EFB38FA4B6",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "8D4C25D3-BC49-4727-B7A2-28C0F2E647EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "3E9AB6FF-D508-42FF-8FB9-24B96AE2F03F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "328785AE-390C-4CA2-9771-4A26387E4E3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "298B797F-C3B6-445C-AADB-8633B446F10F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:*",
                "matchCriteriaId": "F97BA12F-A60D-4398-9CA8-DE2F7BACBA8D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "E19009EB-02D3-424A-947D-7B66EFCCE422",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:*",
                "matchCriteriaId": "89656A51-0840-4A27-B05B-7E54B0CF0521",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "38EB0C0C-56CF-4A8F-A36F-E0E180B9059E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A54544F5-5929-4609-A91C-FCA0FDBFE862",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:7.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "B7985EA2-E167-4BB9-91CA-D57110413B63",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BC6471F-2FB5-4C7A-9B5D-0B08A8E2C08C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "B5F35204-5A57-4086-B782-77A25471F9EA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "536C689B-F40A-4090-B7F9-3D16C6B2A82C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "76A32960-1C18-4DA5-A870-C15C432B6CE3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "4FCFFA39-F7EA-4065-B0B5-A1E2B120EBA0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "7B612FDA-4210-44FE-9B5C-F678EA2CD6FD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "C0256D20-63D3-4DE9-9637-94033F11FC7C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:*",
                "matchCriteriaId": "E3318D91-40AC-4649-8FCD-4557C8F934B9",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A06C29AB-1EAF-43EF-96C3-9E3468911B2F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "43723EC2-295E-4AF7-B654-70F9E42F4807",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system."
      },
      {
        "lang": "es",
        "value": "La vulnerabilidad de escritura arbitraria de archivos en la API vRealize Operations Manager (CVE-2021-21983) anterior a la versión 8.4, puede permitir que un actor malicioso autenticado con acceso de red para la API vRealize Operations Manager pueda escribir archivos en ubicaciones arbitrarias en el sistema operativo photon subyacente."
      }
    ],
    "id": "CVE-2021-21983",
    "lastModified": "2026-08-12T05:17:36.347",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.5,
            "confidentialityImpact": "NONE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 9.2,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.2,
          "impactScore": 5.2,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2021-21983",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2021-03-31T00:00:00+00:00",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2021-03-31T18:15:14.723",
    "references": [
      {
        "source": "security@vmware.com",
        "tags": [
          "Exploit",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html"
      },
      {
        "source": "security@vmware.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://www.vmware.com/security/advisories/VMSA-2021-0004.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://www.vmware.com/security/advisories/VMSA-2021-0004.html"
      }
    ],
    "sourceIdentifier": "security@vmware.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "NVD-CWE-noinfo"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "severity": "MEDIUM",
  "source": "nvd",
  "title": "Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an auth..."
}
Enrichment data
EPSS
View JSON Download
CISA KEV
View JSON Download
Aggregated bundle (all enrichments)
View JSON API Download bundle
View JSON API Download JSON