Multiple JRE security vulnerabilities in VMware vCenter

Release date: 2011-11-01
Updated on: 2011-11-01

Affected Systems:
VMWare VirtualCenter 2.x
VMWare vCenter Server 4.x
VMWare vCenter Update Manager 4.x
Description:
--------------------------------------------------------------------------------
VMware vCenter is a powerful centralized management component for hosts and virtual machines in the VMware vSphere suite.

Multiple VMware vCenter products have multiple implementation vulnerabilities, attackers can exploit this vulnerability to expose sensitive information, manipulate certain data, bypass certain security restrictions, perform spoofing attacks, and perform DNS poisoning attacks.

<* Source: VMware (vmware-security-alert@vmware.com)

Link: http://lists.vmware.com/pipermail/security-announce/2011/000149.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.vmware.com