Description
VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | vRealize Automation | 7.3 and 7.2 | — |
| VMware | vSphere Integrated Containers | 1.x before 1.3 | — |
References
- 102852 vdb-entry
- https://www.vmware.com/security/advisories/VMSA-2018-0006.html
- 1040289 vdb-entry
- 1040290 vdb-entry