---
id: 5115
title: "Hunting for bugs in VMware: View Planner and vRealize Business for Cloud"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/hunting-for-bugs-in-vmware-view-planner-and-vrealize-business-for-cloud/"
published_at: "2022-02-15T14:06:24Z"
tags: ["cloud", "rce", "vulnerability-research", "vmware", "cve", "command-injection"]
phying_url: "https://phying.com/item/5115"
lang: en
---

# Hunting for bugs in VMware: View Planner and vRealize Business for Cloud

## Summary

PT SWARM uncovers unauthenticated RCEs in VMware View Planner (CVE-2021-21978) and vRealize Business for Cloud (CVE-2021-21984). The View Planner flaw traces to an unauthenticated WSGI log-upload endpoint in its dockerized web stack, leading to command execution.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2022-02-15T14:06:24Z
- **Original:** https://swarm.ptsecurity.com/hunting-for-bugs-in-vmware-view-planner-and-vrealize-business-for-cloud/
- **Phying News:** https://phying.com/item/5115