CVE-2021-26987
Critical
Description
Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Vmware Spring Boot
PublishedMar 15, 2021
First seenMar 15, 2021
How to fix
Update
- vmware spring_boot1.3.2 or later
- netapp management_services_for_element_software_and_netapp_hci2.17.56 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware spring_boot | v < 1.3.2 | 1.3.2 |
| netapp element_plug-in_for_vcenter_server | No range specified | — |
| netapp management_services_for_element_software_and_netapp_hci | v < 2.17.56 | 2.17.56 |
| netapp solidfire_\&_hci_management_node | v ≤ 12.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.