VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server

September 21, 2021

Multiple severe security flaws in two VMware network management tools have been patched, allowing an attacker to gain complete control of an organization’s network.

A local privilege escalation vulnerability (CVE202121991), a reverse proxy bypass vulnerability (CVE202122006), and insufficient permission local privilege escalation vulnerabilities have all been discovered in vCenter Server (CVE202122015).

Read More…