VMware vCenter Server mengandung beberapa kerentanan heapoverflow dalam implementasi protokol DCERPC, dimana penyerang dapat mengirim paket melalui jaringan yang memungkinkan eksekusi perintah secara remote (CVE-2024-37079, CVE-2024-37080). Selain itu, terdapat kerentanan yang memungkinkan pengguna lokal yang telah terkotentikasi dapt meningkatkan akses menjadi root pada vCenter Server Appliance (CVE-2024-37081).
UNDUH IMBAUAN KEAMANAN VMSA-2024-0012
Id-SIRTII/CC has the main duty to socialize with stake holders related to IT Security, to do an early monitoring and detection, give an early warning against threats to telecommunication networks from both inside and outside country, particularly in the security measures of network utilization, creating/performing/developing log files and statistics of Indonesian’s internet security.
