VMware Cloud Foundation has a significant RCE flaw

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

A Remote Code Execution (RCE) vulnerability through the XStream open-source library tagged as CVE-2021-39144 in the VMware Cloud Foundation, which is a hybrid cloud platform for hosting enterprise workloads in private or public environments.