Description:

VMware has released security updates to address several vulnerabilities in the following products:

• VMware Workspace ONE UEM console
• VMware Horizon
• VMware vCenter Server
• VMware HCX
• VMware NSX-T Data Center
• VMware Unified Access Gateway
• VMware WorkspaceOne Access
• VMware Identity Manager
• VMware vRealize Operations
• VMware vRealize Operations Cloud Proxy
• VMware vRealize Automation
• VMware vRealize Lifecycle Manager
• VMware Site Recovery Manager, vSphere Replication
• VMware Carbon Black Cloud Workload Appliance
• VMware Carbon Black EDR Server
• VMware Tanzu GemFire
• VMware Tanzu GemFire for VMs
• VMware Tanzu Greenplum
• VMware Tanzu Operations Manager
• VMware Tanzu Application Service for VMs
• VMware Tanzu Kubernetes Grid Integrated Edition
• VMware Tanzu Observability by Wavefront Nozzle
• Healthwatch for Tanzu Application Service
• Spring Cloud Services for VMware Tanzu
• Spring Cloud Gateway for VMware Tanzu
• Spring Cloud Gateway for Kubernetes
• API Portal for VMware Tanzu
• Single Sign-On for VMware Tanzu Application Service
• App Metrics
• VMware vCenter Cloud Gateway
• VMware vRealize Orchestrator
• VMware Cloud Foundation
• VMware Workspace ONE Access Connector
• VMware Horizon DaaS
• VMware Horizon Cloud Connector
• VMware NSX Data Center for vSphere
• VMware AppDefense Appliance
• VMware Cloud Director Object Storage Extension
• VMware Telco Cloud Operations
• VMware vRealize Log Insight
• VMware Tanzu Scheduler
• VMware Smart Assurance NCM
• VMware Smart Assurance SAM [Service Assurance Manager]
• VMware Integrated OpenStack
• VMware vRealize Business for Cloud
• VMware vRealize Network Insight
• VMware Cloud Provider Lifecycle Manager
• VMware SD-WAN VCO
• VMware NSX-T Intelligence Appliance
• VMware Horizon Agents Installer
• VMware Tanzu Observability Proxy
• (Additional products will be added)
• VMware Workspace ONE Access (Access)
• VMware Identity Manager (vIDM)
• VMware vRealize Automation (vRA)
• VMware Cloud Foundation

Threats:

An attacker could exploit this vulnerability by:

• Remote code execution

Best practice and Recommendations:

The CERT team encourages users to review VMware security advisory and apply the necessary updates:

• VMSA-2021-0030 (vmware.com)
• VMSA-2021-0029 (vmware.com)
• VMSA-2021-0028.4 (vmware.com)