VMware View Planner CVE-2021-21978 Exploitation Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•23

Detects exploitation attempts targeting the VMware View Planner vulnerability, CVE-2021-21978. This vulnerability allows for arbitrary file upload due to an unrestricted file upload flaw in the 'upload' function, specifically within the 'wsgi_log_upload.py' script. Attackers can leverage this to upload malicious files, potentially leading to remote code execution.