Positive Technologies, a Russian cybersecurity company that was recently sanctioned by the US, has reported another crucial vulnerability to VMware. Positive Technologies was one of the Russian tech companies sanctioned by the US in April for allegedly aiding Kremlin intelligence agencies.
The latest critical flaw – CVE-2021-21984 – reported by Positive Technologies to VMware is a remote code execution vulnerability that affects VMware vRealize Business for Cloud.
The company said in an advisory, “A malicious actor with network access may exploit this issue causing unauthorized remote code execution on vRealize Business for Cloud Virtual Appliance.”
To Read More: securityweek