CVE-2021-22054

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-22054

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22054.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-22054

Published

2021-12-17T17:15:12.590Z

Modified

2026-03-14T10:44:18.309977Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22054.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "20.0.8.0"
            },
            {
                "fixed": "20.0.8.36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "20.11.0.0"
            },
            {
                "fixed": "20.11.0.40"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "21.2.0.0"
            },
            {
                "fixed": "21.2.0.27"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "21.5.0.0"
            },
            {
                "fixed": "21.5.0.37"
            }
        ]
    }
]