Read the docs
TI-2021-05030 Aliases CVE-2021-21986GHSA-6qhw-394j-xwvg

Missing authentication in VMware vCenter Server and VMware Cloud Foundation

Priority MEDIUM 57CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.

Summary

The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. A malicious actor with network access to port 443 on vCenter Server may perform actions allowed by the impacted plug-ins without authentication.

Why it matters now

EPSS 0.13265 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—VMware vCenter Server and VMware Cloud FoundationVMware vCenter Server (7.x before 7.0 U2b, 6.7 before 6.7 U3n, 6.5 before 6.5 U3p) and VMware Cloud Foundation (4.x before 4.2.1, 3.x before 3.10.2.1)—No fix listedCNA
  • VMware vCenter Server and VMware Cloud Foundation Vendor— Affected VMware vCenter Server (7.x before 7.0 U2b, 6.7 before 6.7 U3n, 6.5 before 6.5 U3p) and VMware Cloud Foundation (4.x before 4.2.1, 3.x before 3.10.2.1) Fixed in — No fix listed CNA

CPE configurations NVD · 52

CPEVersionsRoleVendor
cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*6.5 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*6.5 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*6.5 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*6.5 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*6.5 eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*6.5 fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*6.5 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*6.5 update1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*6.5 update1cVulnerableVMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* Versions 6.5 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* Versions 6.5 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* Versions 6.5 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:* Versions 6.5 e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:* Versions 6.5 f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* Versions 6.5 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* Versions 6.5 update1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* Versions 6.5 update1c Vulnerable ·VMware
Show 42 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*6.5 update1dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*6.5 update1eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*6.5 update1gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*6.5 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*6.5 update2bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*6.5 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*6.5 update2dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*6.5 update2gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*6.5 update3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*6.5 update3dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*6.5 update3fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*6.5 update3kVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*6.5 update3nVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*6.7 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*6.7 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*6.7 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*6.7 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*6.7 update1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*6.7 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*6.7 update2aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*6.7 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*6.7 update3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*6.7 update3aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*6.7 update3bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*6.7 update3fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*6.7 update3gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*6.7 update3jVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*6.7 update3lVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*6.7 update3mVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*7.0VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*7.0 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*7.0 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*7.0 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*7.0 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*7.0 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*7.0 update1aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*7.0 update1cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*7.0 update1dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*7.0 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*7.0 update2aVulnerableVMware
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*3.0 to before 3.10.2.1; 4.0 to before 4.2.1VulnerableVMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* Versions 6.5 update1d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* Versions 6.5 update1e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* Versions 6.5 update1g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* Versions 6.5 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* Versions 6.5 update2b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* Versions 6.5 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* Versions 6.5 update2d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* Versions 6.5 update2g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* Versions 6.5 update3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* Versions 6.5 update3d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* Versions 6.5 update3f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* Versions 6.5 update3k Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* Versions 6.5 update3n Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:* Versions 6.7 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:* Versions 6.7 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:* Versions 6.7 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:* Versions 6.7 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:* Versions 6.7 update1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:* Versions 6.7 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:* Versions 6.7 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:* Versions 6.7 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:* Versions 6.7 update3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:* Versions 6.7 update3a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:* Versions 6.7 update3b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:* Versions 6.7 update3f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:* Versions 6.7 update3g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:* Versions 6.7 update3j Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:* Versions 6.7 update3l Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:* Versions 6.7 update3m Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:* Versions 7.0 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:* Versions 7.0 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:* Versions 7.0 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:* Versions 7.0 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:* Versions 7.0 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:* Versions 7.0 update1a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:* Versions 7.0 update1c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:* Versions 7.0 update1d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:* Versions 7.0 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:* Versions 7.0 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* Versions 3.0 to before 3.10.2.1; 4.0 to before 4.2.1 Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-21986
  2. 2026-10-03 Alias added: GHSA-6qhw-394j-xwvg

References

Advisory 2

  • TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07131 Code injection in VMware Workspace ONE Access and Identity Manager KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05029 Improper input validation in VMware vCenter Server and VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
See all 134 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences