VMware Horizon Log4Shell RCE

Description

Due to vulnerabilities in Log4j library used by vCenter, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of VMware Horizon

References

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities

Related Vulnerabilities

File Manager Remote Code Execution (4.5)

phpThumb() fltr[] parameter command injection vulnerability

Unrestricted access to Prometheus

open-flash-chart-core Remote Code Execution (0.4)

Apache Solr Log4Shell RCE

Severity

High

Classification

CVE-2021-44228 CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H