← CVE Intelligence

CVE-2021-21980

n/a / VMware vCenter Server and VMware Cloud Foundation PUBLISHED

Description (CNA)

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

Affected (CNA)

Vendor / productVersions
n/a / VMware vCenter Server and VMware Cloud Foundationaffected VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.