{"vulnerability": "CVE-2021-2199", "sightings": [{"uuid": "98f74cde-1203-4a02-9476-2a2409edb2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21999", "type": "seen", "source": "https://t.me/cKure/6014", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-21999: VMware Workstation Tools Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.\n\nhttps://www.zerodayinitiative.com/advisories/ZDI-21-754/\n\nhttps://www.vmware.com/security/advisories/VMSA-2021-0013.html\n\nCredits: Zeeshan Shaikh ( https://www.bugzzzhunter.com/ )", "creation_timestamp": "2021-06-25T12:25:36.000000Z"}, {"uuid": "5d02eea9-25a3-48fd-a1e2-ad12e86fb1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21993", "type": "seen", "source": "https://t.me/cibsecurity/29298", "content": "\u203c CVE-2021-21993 \u203c\n\nThe vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-23T16:30:08.000000Z"}, {"uuid": "f933a754-f357-45ec-a8ae-5332fb5c15cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21991", "type": "seen", "source": "https://t.me/cibsecurity/29246", "content": "\u203c CVE-2021-21991 \u203c\n\nThe vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:04.000000Z"}, {"uuid": "06232407-0720-43f9-aeb8-1c535245310e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21992", "type": "seen", "source": "https://t.me/cibsecurity/29245", "content": "\u203c CVE-2021-21992 \u203c\n\nThe vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:03.000000Z"}, {"uuid": "9a02f7ac-9e37-4fd4-8edb-824531703dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21996", "type": "seen", "source": "https://t.me/cibsecurity/28461", "content": "\u203c CVE-2021-21996 \u203c\n\nAn issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T18:34:44.000000Z"}, {"uuid": "84c83123-ad75-4266-b1a7-ef479a631126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21998", "type": "seen", "source": "https://t.me/thehackernews/1312", "content": "VMware has released security patches for Carbon Black App Control to fix a critical vulnerability (CVE-2021-21998, CVSS 9.4) that could allow attackers to access targeted servers without authentication.\n\nDetails: https://thehackernews.com/2021/06/critical-auth-bypass-bug-affects-vmware.html", "creation_timestamp": "2024-04-23T13:18:14.000000Z"}]}