Vcentre HTML5 vulnerability

[Jcx500]

For those who are using vcentre,

 

https://www.theregister.com/AMP/2021/02/23/vmware_vsphere_critical_bugs/

[willtech]

Two more patched added: VMware reveals critical vCenter hole it says ‘needs to be considered at once’

 

As vCenter is the tool with which VMware users drive their fleets of virtual machines, the bug is rated a 9.8 out of 10 in severity.

Edited May 26, 2021 by willtech

[DavR]

Ta chaps, updating my vCenter Server now.

[free780]

I'd consider firewalling access to vcentre. Also all of your VMWare Infrastructure.

There have been cases where ransomware has encrypted VM's.

This is partly why security researchers keep finding holes in VMWare software.

Expect more patches.