Category: Security Advisory

Posted in Security Advisory

Update on VMSA-2021-0028

NSX-T Data Center (2.5.0-3.1.3) (KB87086) – https://kb.vmware.com/s/article/87086?lang=en_US •December 17th 2021 – 15:00 PST [6:00PM EST]: Added detail regarding NSX T 3.2.0 release pertinent to CVE-2021-44228 & CVE-2021-45046….

Continue Reading
Posted in Security Advisory SRM

Workaround instructions to address CVE-2021-44228 in Site Recovery Manager

As we are still waiting for patch to be released, here is a workaround provided by VMware which need to be applied to Site Recovery…

Continue Reading
Posted in Security Advisory vROps

Workaround instructions to address CVE-2021-44228 and CVE-2021-45046 in vRealize Operations 8.x

This is most up-to-date document on how to remediate CVE-2021-44228 and CVE-2021-45046. On 15th of December 2021 VMware added workaround steps related to CVE-2021-45046. I…

Continue Reading
Posted in Security Advisory

VMware is going to update log4j to version 2.16

Today VMware published update on log4j solution. As per statment on the vendor KB website says that VMware expect to fully address both CVE-2021-44228 and…

Continue Reading
Posted in Security Advisory

-Dlog4j2.formatMsgNoLookups=true” or “class JndiLookup” is not valid workaround anymore!

It looks like to workaround published by VMware is not valid anymore! On December 9, 2021 VMware released VMSA-2021-0028 to track the impact of an…

Continue Reading
Posted in Security Advisory

This is a CRITICAL Advisory with the highest possible severity (CVSSv3 score of 10 out of 10) VMSA-2021-0028

VMware published security advisory, VMSA-2021-0028, which impacts many VMware products through a Remote Code Execution (RCE) vulnerability via Apache Log4j.  This is a CRITICAL Advisory with the highest possible severity (CVSSv3…

Continue Reading
Posted in Security Advisory

Security Advisory VMSA-2021-0020

I wanted to make sure that you were aware of the CRITICAL  vCenter Server Security Advisory that was just released yesterday (21/09/2021).    Security Advisory VMSA-2021-0020  VMware vCenter Server updates…

Continue Reading
Posted in Security Advisory

Security Advisory VMSA-2021-0018

Yesterday VMware released  IMPORTANT Security Advisory for vRealize Operations Manager, Please see below information on VMSA-2021-0018, Important Notes, and Security Patch PAK to address this Security Advisory: Security Advisory VMSA-2021-0018 – VMware vRealize Operations…

Continue Reading
Posted in Security Advisory

Security Advisory VMSA-2021-0014 (CVE-2021-21994, CVE-2021-21995)

IMPORTANT Security Advisory that was released earlier yesterday (13-07-2021) Security Advisory VMSA-2021-0014 VMware ESXi updates address authentication and denial of service vulnerabilities (CVE-2021-21994, CVE-2021-21995) with a maximum CVSSv3…

Continue Reading
Posted in Security Advisory

PrintNightmare – CVE-2021-1675 & CVE-2021-34527

There is no patch as of yet, hence this workaround need to be applied. PowerShell: Determine if the Print Spooler service is running: Stop and…

Continue Reading