CVE-2021-21991
Estado: ModificadaAlta (7.8)—
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash).
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.32%
- Percentil entre todas las CVEs puntuadas: 23
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-21991",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "security@vmware.com",
"affectedData": [
{
"vendor": "n/a",
"product": "VMware vCenter Server, VMware Cloud Foundation",
"versions": [
{
"status": "affected",
"version": "VMware vCenter Server(7.x before 7.0 U2c, 6.7 before 6.7 U3o and 6.5 before 6.5 U3q) and VMware Cloud Foundation (4.x before 4.3 and 3.x before 3.10.2.2)"
}
]
}
]
}
],
"published": "2021-09-22T19:15:09.093",
"references": [
{
"url": "https://www.vmware.com/security/advisories/VMSA-2021-0020.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "security@vmware.com"
},
{
"url": "https://www.vmware.com/security/advisories/VMSA-2021-0020.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash)."
},
{
"lang": "es",
"value": "vCenter Server contiene una vulnerabilidad de escalada de privilegios local debido a la forma en que maneja los tokens de sesión. Un actor malicioso con acceso de usuario no administrativo en el host de vCenter Server puede explotar este problema para escalar los privilegios a administrador en vSphere Client (HTML5) o vCenter Server vSphere Web Client (FLEX/Flash)"
}
],
"lastModified": "2026-06-17T03:36:30.933",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127DEE95-0B04-4A98-B96A-15CC253C7357",
"versionEndExcluding": "3.10.2.2",
"versionStartIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "722CF000-C0A1-4704-BDC6-3446D1530F3B",
"versionEndExcluding": "4.3",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23CFE5A5-A166-4FD5-BE97-5F16DAB1EAE0"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF7DDB0C-3C07-4B5E-8B8A-0542FEE72877"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD16169-A7DF-4604-888C-156A60018E32"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46FC9F34-C8FA-4AFE-9F4A-7CF9516BD4D9"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D26534EB-327B-4ED6-A3E1-005552CB1F9D"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "786CDD50-7E18-4437-8DB9-2D0ADECD436E"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2CE8DAE-0E78-4004-983D-1ECD8855EC33"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E51F433-1152-4E94-AF77-970230B1A574"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0064D104-E0D8-481A-9029-D3726A1A9CF4"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B4D3F61-6CD9-411F-A205-EB06A57EBB4E"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F72A1E9C-F960-4E8C-A46C-B38209E6349E"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C33CE46-F529-4EA9-9344-6ED3BFA7019D"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F1D8161-0E02-45C9-BF61-14799AB65E03"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F2CB1FF-6118-4875-945D-07BAA3A21FFA"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AEDA28A-5C8E-4E95-A377-3BE530DBEAB5"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDDC6510-3116-4578-80C8-8EF044A8370A"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8678DB48-CB98-4E4C-ADE6-CABA73265FEC"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBD9A341-1FBF-4E04-848B-550DEB27261A"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4955663C-1BB6-4F3E-9D4B-362DF144B7F1"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE0F8453-3D6C-4F1C-9167-3F02E3D905DC"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EAD4045-A7F9-464F-ABB9-3782941162CC"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F0A79C2-33AE-40C5-A853-770A4C691F29"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8BB6CBC-11D6-40A4-ABAF-53AB9BED5A73"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26A3EC15-8C04-49AD-9045-4D9FADBD50CD"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF33103-ECDD-427B-A445-2D7F90202FCB"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E456F84C-A86E-4EA9-9A3E-BEEA662136E6"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5241C282-A02B-44B2-B6CA-BA3A99F9737C"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04A60AC7-C2EA-4DBF-9743-54D708584AFA"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A91B0C4-F184-459E-AFD3-DE0E351CC964"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23253631-2655-48A8-9B00-CB984232329C"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50C2A9A8-0E66-4702-BCD4-74622108E7A6"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE4D3E2A-C32D-408F-B811-EF8BC86F0D34"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31CA7802-D78D-4BAD-A45A-68B601C010C6"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B98981B-4721-4752-BAB4-361DB5AEB86F"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04487105-980A-4943-9360-4442BF0411E6"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24D24E06-EB3F-4F11-849B-E66757B01466"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AF12716-88E2-44B5-ACD7-BCBECA130FB8"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3352212C-E820-47B3-BDF5-57018F5B9E81"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6436ADFD-6B94-4D2A-B09B-CED4EC6CA276"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D06832CE-F946-469D-B495-6735F18D02A0"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "726AC46D-9EA8-4FE8-94B8-0562935458F2"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0243D22F-1591-4A95-A7FE-2658CEE0C08F"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02AE5983-CD14-4EAF-9F5C-1281E3DE7F46"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FA81CCD-A05E-498C-820E-21980E92132F"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EE83406-A3D9-4F75-A1A6-63831CEBEEC1"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB563627-C9CF-4D8A-B882-9AB65EAE9E15"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCA03B2A-48B2-48AD-B8EB-9D7BB2016819"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2392D0F-D7A2-4E01-9212-1BA6C895AEBF"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D731C1A-9FE5-461C-97E2-6F45E4CBABE1"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8725E544-2A94-4829-A683-1ECCE57A74A6"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FC6765A-6584-45A8-9B21-4951D2EA8939"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85DD238C-EF73-44F0-928E-A94FF5C4B378"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4CA36C1-732E-41AE-B847-F7411B753F3D"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DA882B6-D811-4E4B-B614-2D48F0B9036E"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D30A78E-16D0-4A2E-A2F8-F6073698243E"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@vmware.com"
}