Title

VMware vCenter Orchestrator Remote Code Execution Vulnerability (Cat I impact)

Discussion

VMware has released a security advisory addressing a critical deserialization vulnerability in vCenter Orchestrator. VMware vCenter Orchestrator enables administrators to capture best practices and turn them into automated workflows. To exploit this vulnerability, an attacker would send a malicious XML request to the affected system. If successfully exploited, the attacker could execute arbitrary code.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-64905

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.