CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-05-26
VMware vCenter Server vSAN Health Check Plugin Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2021-21985)
[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 with the default-enabled Virtual SAN Health Check plug-in
[Impact] An unauthenticated attacker with network access to port 443 can execute arbitrary commands with root privileges on the underlying operating system
[Mitigation] Apply official security patches immediately, or disable the vulnerable vSAN Health Check plug-in as a temporary workaround