- Vendor / Project
- VMware
- Product
- vCenter Server
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Known
- CWEs
- CWE-23
Description
VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
Required action
Apply updates per vendor instructions.