critical9.8
CVE-2021-21984
VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point.
Impact
VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vrealize Business For Cloud | from 7.0 before 7.6.0 |