Page 10 - Vcenter Server News Today : Breaking News, Live Updates & Top Stories | Vimarsana

VMware Urges Rapid Patching for Serious vCenter Server Bug Compliance Compliance Twitter Get Permission VMware is warning all vCenter Server administrators to patch their software to fix both a serious vulnerability that could be used to execute arbitrary code, as well as a separate authentication flaw. Administrators use vCenter Server to manage installations of vSphere, which is VMware's virtualization platform. The vulnerabilities need "your immediate attention if you are using vCenter Server," VMware's Bob Plankers says in a blog post. "All environments are different, have different tol...

Critical RCE Vulnerability Discovered in VMware vCenter Server May 26, 2021 11:32 GMT   ·  Comment      VMware VMware has released fixes to address a significant vulnerability in vCenter System that can be exploited by an attacker to execute arbitrary code on the server.   The vulnerability, identified as CVE-2021-21985 (CVSS score 9.8), originates from a lack of input validation in the Virtual SAN (vSAN) plug-in Health Check. This plug-in is enabled by default in vCenter Server. VMware said in its advisory that "A malicious actor with network access to port 443 may exploit th...

By Staff Writer on May 26, 2021 6:13AM Urges patching as soon as possible. VMware said three versions of its vCenter Server management software for controlling vSphere environments are susceptible to a critical security flaw that should be immediately patched. The vendor said in a blog post that the issue needs the “immediate attention” of administrators. “Given the severity, we strongly recommend that you act,” VMware said. The company said there was a remote code execution (RCE) vulnerability in “the vSAN plugin [that] ships with and is en...

By Eduard Kovacs on May 07, 2021 Agencies in the United States and the United Kingdom on Friday published a joint report providing more details on the activities of the Russian cyberspy group that is believed to be behind the attack on IT management company SolarWinds. The report reveals that the hackers started using the open-source adversary simulation framework Sliver after some of their operations were exposed. The FBI, NSA, CISA and the UK’s NCSC say the Russian threat actor tracked as APT29 (aka the Dukes, Cozy Bear and Yttrium) was behind the SolarWinds attack, which resulted in hun...

minute read Share this article: CVE-2021-21982 affects a platform designed to secure private clouds, and the virtual servers and workloads that they contain. A critical security vulnerability in the VMware Carbon Black Cloud Workload appliance would allow privilege escalation and the ability to take over the administrative rights for the solution. The bug (CVE-2021-21982) ranks 9.1 out of 10 on the CVSS vulnerability-severity scale. The VMware Carbon Black Cloud Workload platform is designed to provide cybersecurity defense for virtual servers and workloads that are hosted on the...