VMware Releases Security Update

Threat ID:: CC-3853
Threat Severity:: Information only
Published:: 10 May 2021 2:11 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

VMware vRealize Business for Cloud Versions: all prior to 7.6.0

Threat details

Introduction

VMware has released a security update to address a vulnerability in VMware vRealize Business for Cloud. A remote attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Organisations are encouraged to review VMware Security Advisory VMSA-2021-0007 and apply the necessary update.

CVE Vulnerabilities

Status Published

CVE-2021-21984

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance.

Last edited: 10 May 2021 2:48 pm