VMware Patches Multiple vCenter Server Vulnerabilities (CVE-2021-21985, CVE-2021-21986)

On May 25, VMware published an advisory (VMSA-2021-0010) regarding two vulnerabilities impacting vCenter Server, a centralized management software for VMware vSphere systems. In a rare move, VMware also published a blog post providing guidance on how users can mitigate these vulnerabilities. Organizations are strongly encouraged to apply patches as soon as possible.

For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.