CVE-2021-21980

Description

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

Affected products

Vendor	Product	Affected	Fixed
—	VMware vCenter Server and VMware Cloud Foundation	VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x	—

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 6 repositories

Osyanina/westone-CVE-2021-21980-scanner ★ 6 · Dec 3, 2021

A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.
pratikjojode/vcenter-cve-2021-21980-lab ★ 1 · Dec 1, 2025

Realistic vulnerable lab for CVE-2021-21980 (VMware vSphere Path Traversal) - Actual file exploitation, not a mock server
gui2000guix-ui/cve-2021-21980-nuclei-poc ★ 0 · Nov 27, 2025

Nuclei Template and Mock Server for CVE-2021-21980 (vSphere Path Traversal)
pkxk5pr6m2-web/cve-2021-21980-nuclei-poc ★ 0 · Nov 27, 2025

Nuclei Template and Mock Server for CVE-2021-21980 (vSphere Path Traversal)
gui2000guix-ui/cve-2021-21980-mock-server ★ 0 · Nov 27, 2025

CVE-2021-21980
Osyanina/westone-CVE-2022-1388-scanner ★ 0 · May 7, 2022

A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References

https://www.vmware.com/security/advisories/VMSA-2021-0027.html