CVE-2021-21980
Description
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
8.288
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in VMware vCenter 6.5 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1e | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_1g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_2 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_2b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_2c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_2d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_2g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3f | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3k | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3n | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3p | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.5-update_3q | Windows |
| Multiple Vulnerabilities are affected in VMware vCenter 6.7 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_1 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_1b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_2 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_2a | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_2c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3a | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3f | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3j | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3l | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3m | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter 6.7-update_3n | Windows |
| Vulnerabilities CVE-2021-21980,CVE-2022-31698 are affected in VMware vCenter 6.7-update_3o | Windows |
| Multiple Vulnerabilities are affected in VMware vCenter Server 6.5 | Windows |
| Multiple Vulnerabilities are affected in VMware vCenter Server 6.7 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1e | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_1g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_2 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_2b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_2c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_2d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_2g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3d | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3f | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3k | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3n | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3p | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.5-update_3q | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_1 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_1b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_2 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_2a | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_2c | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3 | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3a | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3b | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3f | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3g | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3j | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3l | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3m | Windows |
| Vulnerabilities CVE-2021-21980 are affected in VMware vCenter Server 6.7-update_3n | Windows |
| Vulnerabilities CVE-2021-21980,CVE-2022-31698 are affected in VMware vCenter Server 6.7-update_3o | Windows |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234