具有 vCenter Server 網(wǎng)絡訪問權限的遠程攻擊者可以利用該漏洞在目標系統(tǒng)上執(zhí)行任意代碼,漏洞詳情請見:
https://core.vmware.com/resource/vmsa-2023-0023-questions-answers#introduction
https://www.vmware.com/security/advisories/VMSA-2023-0023.html
受影響的范圍:
VMware vCenter Server 8.0 < 8.0U1d
VMware vCenter Server 7.0 < 7.0U3o
VMware vCenter Server 6.7 < 6.7U3T
VMware vCenter Server 6.5 < 6.5.0U3V
VMware Cloud Foundation(VMware vCenter Server) 5.x
VMware Cloud Foundation(VMware vCenter Server) 4.x
VMware Cloud Foundation(VMware vCenter Server) 3.x
蘇州天劍服務工程師建議用戶盡快下載安裝補丁程序。