VMWARE VCENTER SERVER VULNERABILITIES LET ATTACKERS EXECUTE REMOTE CODE

Summary from the TLDR InfoSec newsletter

Two critical vulnerabilities in VMware vCenter Server and Cloud Foundation products allow attackers to execute remote code and escalate privileges. VMware has advised customers to patch affected systems immediately by upgrading to specific versions or applying the async patch. These flaws impact versions 7.0 and 8.0 of vCenter Server and versions 4.x and 5.x of Cloud Foundation.