CVE-2021-21983
MediumCVSS 6.5Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
An arbitrary file write vulnerability in vRealize Operations Manager API prior to 8.4 allows an authenticated malicious actor with network access to write files to arbitrary locations on the underlying Photon OS.
Risk Assessment
An attacker could overwrite critical system files, potentially leading to system compromise or permanent damage.
Recommendation
Upgrade vRealize Operations Manager to version 8.4 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.