Tanzania Computer Emergency Response Team

Advisory No: TZCERT/SA/2021/05/27 Date of First Release: 27th May 2021 Source: VMware  Software Affected:  VMware vCenter Server (vCenter Server)VMware Cloud Foundation (Cloud Foundation) Overview: Multiple vulnerabilities exist in vSphere Client (HTML5) that could cause remote code execution (CVE-2021-21985) and perform actions allowed by Virtual SAN Health Check plug-in without authentication (CVE-2021-21986). Description: The vSphere Client …

Google has released security updates to address vulnerabilities in Chrome prior to version 91.0.4472.77. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Chrome Release Note and apply necessary updates.

VMware has released security updates to address vulnerabilities in VMware vCenter Server and VMware Cloud Foundation. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review VMware Security Advisory and apply necessary updates.

Hewlett Packard Enterprise has released security updates to address a vulnerability in HPE 3PAR and Primera SSMC. Exploitation of this vulnerability may allow an attacker to take control of affected system. Users and administrators are encouraged to review HP Security Advisory and apply necessary updates.

Arch Linux has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system. Users and administrators are encouraged to review Arch Linux Security Advisories and apply necessary updates.