---
id: 5114
title: "Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/catching-bugs-in-vmware-carbon-black-cloud-workload-appliance-and-vrealize-operations-manager/"
published_at: "2022-02-25T11:23:42Z"
tags: ["cloud", "rce", "authentication-bypass", "vmware", "carbon-black", "vrealize"]
phying_url: "https://phying.com/item/5114"
lang: en
---

# Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager

## Summary

Part two of PT SWARM's VMware research: an auth bypass in Carbon Black Cloud Workload Appliance (CVE-2021-21978) and a chain in vRealize Operations (CVE-2021-21975/22023/21983) leading to RCE.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2022-02-25T11:23:42Z
- **Original:** https://swarm.ptsecurity.com/catching-bugs-in-vmware-carbon-black-cloud-workload-appliance-and-vrealize-operations-manager/
- **Phying News:** https://phying.com/item/5114