imPC@ndo IT

Tracker / CVE-2021-21985

CVE-2021-21985

Ransomware Critical 9.8

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.

Affected products and versions

vmware cloud_foundation · 3.0 → 3.10.2.1
vmware cloud_foundation · 4.0 → 4.2.1
vmware vcenter_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References