Description

Due to vulnerabilities in Log4j library used by vCenter, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of VMware vCenter

References

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities

Related Vulnerabilities

PHPUnit Remote Code Execution

Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950

WordPress Plugin Unyson Information Disclosure (2.7.18)

WordPress Plugin YaySMTP-Simple WP SMTP Mail Information Disclosure (2.2)

Symfony weak application secret

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Acumonitor Code Execution Information Disclosure CWE-78 CVE-2021-44228