---
title: "Critical Security Advisories"
canonical: "https://www.virtcloudrocks.com/space/vblog01/blog/721097/Critical%20Security%20Advisories"
format: markdown
---
<span style="color: #000000">A security vulnerability that has been announced by VMware today</span><span style="color: #000000">.</span><span style="color: #000000"> </span>

<span style="color: #000000">The advisory can be found at:</span>

<span style="color: #000000"> </span>

<span style="color: #000000">[https://www.vmware.com/security/advisories/VMSA-2021-0020.html](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vmware.com%2Fsecurity%2Fadvisories%2FVMSA-2021-0020.html&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303120377%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=sIqxa6%2FKmo5h%2B1iODIUr1xVGxQDeX7x9viTuWj0IGAQ%3D&reserved=0)</span>

<span style="color: #000000"> </span>

<span style="color: #000000">**Products affected:**</span>

- <span style="color: #000000">VMware vCenter Server</span><span style="color: #000000"> </span><span style="color: #000000">(v 6.5, v 6.7, v 7.0)</span>
- <span style="color: #000000">VMware Cloud Foundation (v 3.x, v 4.x)</span>

<span style="color: #000000">** **</span>

<span style="color: #000000">**Summary of issue:**</span>

- <span style="color: #000000">VMware vCenter has multiple security fixes available (</span><span style="color: #000000">CVSSv3 scores range from 9.8 - 4.3)</span>
- <span style="color: #000000">Fixes have been made available, please view Response Matrix below or on the VMSA link.</span>

<span style="color: #000000">** **</span>

<span style="color: #000000">**Recommended Action:**</span>

- <span style="color: #000000">Customers are recommended to update as soon as possible.</span>
- <span style="color: #000000">Workaround for VCSA for highest risk issue is possible as a gap stop but NOT advised as there are a significant number of high to medium patched included in the update</span>

<span style="color: #000000"> </span>

<span style="color: #000000"> </span><span style="color: #000000">For quick reference please view the Response Matrix:</span>

<span style="color: #000000">** **</span>

## **<span style="color: #000000">vCenter 7</span>**

|  |  |  |  |  |  |  |  |  |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| <span style="color: #000000">**VMware Product**</span> | <span style="color: #000000">**Version**</span> | <span style="color: #000000">**Running On**</span> | <span style="color: #000000">**CVE**</span> | <span style="color: #000000">**CVSSv3**</span> | <span style="color: #000000">**Severity**</span> | <span style="color: #000000">**Fixed Version**</span> | <span style="color: #000000">**Workarounds**</span> | <span style="color: #000000">**Additional Documentation**</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">7.0</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22005</span> | <span style="color: #000000">9.8</span> | <span style="color: #000000">Critical</span> | <span style="color: #000000">7.0 U2c</span> | <span style="color: #000000">[KB85717](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85717&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303120377%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=UXrmEujxtD576dUJx%2FiHue3rbqCdNL7DaJFAVAErhEM%3D&reserved=0)</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">7.0</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-21991, CVE-2021-21992, CVE-2021-21993,</span>  
<span style="color: #000000">CVE-2021-22006, CVE-2021-22014, CVE-2021-22015, CVE-2021-22007, CVE-2021-22019,</span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22009,</span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22010, CVE-2021-22020, CVE-2021-22008</span> | <span style="color: #000000">4.3-8.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">7.0 U2c</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">7.0</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22011, CVE-2021-22018</span> | <span style="color: #000000">6.5, 8.1</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">7.0.2 U2d</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">7.0</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22012,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22013,</span>  
<span style="color: #000000">CVE-2021-22016,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22017</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">4.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22005</span> | <span style="color: #000000">9.8</span> | <span style="color: #000000">Critical</span> | <span style="color: #000000">[KB85718](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85718&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303130331%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ltkmQKMGzA648LlPcYstQDx%2BstTfcMYhuLMhY8WPlQk%3D&reserved=0)</span><span style="color: #000000"> </span><span style="color: #000000">(4.3)</span> | <span style="color: #000000">[KB85717](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85717&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303130331%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TrMmGRlQevDg0SC26eR7Xu4nWpWAjI2iLLESmBrf%2FfQ%3D&reserved=0)</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">4.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-21991, CVE-2021-21992, CVE-2021-21993,</span>  
<span style="color: #000000">CVE-2021-22006, CVE-2021-22014, CVE-2021-22015, CVE-2021-22007, CVE-2021-22019, CVE-2021-22009, CVE-2021-22010, CVE-2021-22020, CVE-2021-22008</span> | <span style="color: #000000">4.3-8.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">[KB85718](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85718&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303130331%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ltkmQKMGzA648LlPcYstQDx%2BstTfcMYhuLMhY8WPlQk%3D&reserved=0)</span><span style="color: #000000"> </span><span style="color: #000000">(4.3)</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">4.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22011, CVE-2021-22018</span> | <span style="color: #000000">6.5, 8.1</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">[KB85718](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85718&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303140298%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=AU8tSnvmEVtAP7C1TZMk70ll0edS2gX4d6AMIKUAzx0%3D&reserved=0)</span><span style="color: #000000"> </span><span style="color: #000000">(4.3.1)</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">4.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22012,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22013,</span>  
<span style="color: #000000">CVE-2021-22016,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22017</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |

<span style="color: #000000">** **</span>

## **<span style="color: #000000">vCenter 6.7</span>**

|  |  |  |  |  |  |  |  |  |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| <span style="color: #000000">**VMware Product**</span> | <span style="color: #000000">**Version**</span> | <span style="color: #000000">**Running On**</span> | <span style="color: #000000">**CVE**</span> | <span style="color: #000000">**CVSSv3**</span> | <span style="color: #000000">**Severity**</span> | <span style="color: #000000">**Fixed Version**</span> | <span style="color: #000000">**Workarounds**</span> | <span style="color: #000000">**Additional Documentation**</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Virtual Appliance</span> | <span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22005</span> | <span style="color: #000000">9.8</span> | <span style="color: #000000">Critical</span> | <span style="color: #000000">6.7 U3o</span> | <span style="color: #000000">[KB85717](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85717&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303140298%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=O9mYZ5oQXAM1QEHivt2QoiFz36GNhuUp9KgjdVkg26w%3D&reserved=0)</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Windows</span> | <span style="color: #000000">CVE-2021-22005</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-21991, CVE-2021-21992, CVE-2021-21993,</span>  
<span style="color: #000000">CVE-2021-22006, CVE-2021-22011, CVE-2021-22014, CVE-2021-22016, CVE-2021-22017, CVE-2021-22019, CVE-2021-22009, CVE-2021-22010, CVE-2021-22008</span> | <span style="color: #000000">4.3-8.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">6.7 U3o</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Virtual Appliance</span> | <span style="color: #000000">CVE-2021-22007,</span>  
<span style="color: #000000">CVE-2021-22015,</span>  
<span style="color: #000000">CVE-2021-22020</span> | <span style="color: #000000">5.0-7.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">6.7 U3o</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Windows</span> | <span style="color: #000000">CVE-2021-22007,</span>  
<span style="color: #000000">CVE-2021-22015,</span>  
<span style="color: #000000">CVE-2021-22020</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22012,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22013,</span>  
<span style="color: #000000">CVE-2021-22018</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">3.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22005</span> | <span style="color: #000000">9.8</span> | <span style="color: #000000">Critical</span> | <span style="color: #000000">[KB85719](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85719&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303150247%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Uf0woBX179XyNook1tweuvHf6bCh1MRY9XggR160q5k%3D&reserved=0)</span><span style="color: #000000"> </span><span style="color: #000000">(3.10.2.2)</span> | <span style="color: #000000">[KB85717](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85717&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303150247%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=S%2BklaZcW03zaD%2BNQKPm8VhJEYyK8DpwYkRHpNoQJsjU%3D&reserved=0)</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">3.x</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-21991, CVE-2021-21992, CVE-2021-21993,</span>  
<span style="color: #000000">CVE-2021-22006, CVE-2021-22011, CVE-2021-22014, CVE-2021-22015, CVE-2021-22016, CVE-2021-22007, CVE-2021-22017, CVE-2021-22019, CVE-2021-22009, CVE-2021-22010, CVE-2021-22020, CVE-2021-22008</span> | <span style="color: #000000">4.3-8.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">[KB85719](https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkb.vmware.com%2Fkb%2F85719&data=04%7C01%7C%7Ccdae63904a604a05f0fa08d97d20238a%7C0edca4720b7146e696c70a68c10dcb96%7C0%7C0%7C637678399303150247%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Uf0woBX179XyNook1tweuvHf6bCh1MRY9XggR160q5k%3D&reserved=0)</span><span style="color: #000000"> </span><span style="color: #000000">(3.10.2.2)</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">Cloud Foundation</span>  
<span style="color: #000000">(vCenter Server)</span> | <span style="color: #000000">6.7</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22012,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22013,</span>  
<span style="color: #000000">CVE-2021-22018</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |

<span style="color: #000000">** **</span>

## **<span style="color: #000000">vCenter 6.5</span>**

|  |  |  |  |  |  |  |  |  |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| <span style="color: #000000">**VMware Product**</span> | <span style="color: #000000">**Version**</span> | <span style="color: #000000">**Running On**</span> | <span style="color: #000000">**CVE**</span> | <span style="color: #000000">**CVSSv3**</span> | <span style="color: #000000">**Severity**</span> | <span style="color: #000000">**Fixed Version**</span> | <span style="color: #000000">**Workarounds**</span> | <span style="color: #000000">**Additional Documentation**</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.5</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-21991, CVE-2021-21992, CVE-2021-21993, CVE-2021-22011, CVE-2021-22012, CVE-2021-22013, CVE-2021-22014, CVE-2021-22017, CVE-2021-22019, CVE-2021-22009, CVE-2021-22008</span> | <span style="color: #000000">4.3-8.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">6.5 U3q</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.5</span> | <span style="color: #000000">Virtual Appliance</span> | <span style="color: #000000">CVE-2021-22015</span> | <span style="color: #000000">7.8</span> | <span style="color: #000000">Important</span> | <span style="color: #000000">6.5 U3q</span> | <span style="color: #000000">None</span> | <span style="color: #000000">None</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.5</span> | <span style="color: #000000">Windows</span> | <span style="color: #000000">CVE-2021-22015</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |
| <span style="color: #000000">vCenter Server</span> | <span style="color: #000000">6.5</span> | <span style="color: #000000">Any</span> | <span style="color: #000000">CVE-2021-22005, CVE-2021-22006,</span>  
<span style="color: #000000">CVE-2021-22007, CVE-2021-22010, CVE-2021-22016,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22018,</span><span style="color: #000000"> </span><span style="color: #000000"> </span><span style="color: #000000">CVE-2021-22020</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">Unaffected</span> | <span style="color: #000000">N/A</span> | <span style="color: #000000">N/A</span> |

<span style="color: #000000">** **</span>