Description
VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker with network access to port 443 to execute commands with unrestricted privileges on the underlying operating system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 3.x before 3.10.1.2 | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 4.x before 4.2 | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 6.5 before 6.5 U3n | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 6.7 before 6.7 U3l | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 7.x before 7.0 U1c | affected |