CVE-2021-39144

Produto

XStream / XStream

Vulnerabilidade

XStream Remote Code Execution Vulnerability

Adicionado ao KEV

10 de mar. de 2023

Corrigir até

31 de mar. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.vmware.com/security/advisories/VMSA-2022-0027.html, https://x-stream.github.io/CVE-2021-39144.html; https://nvd.nist.gov/vuln/detail/CVE-2021-39144