19 should apply the latest workarounds or update the software following the Knowledge Base Article 87073, because additional disclosures from the Apache Software Foundation have been addressed.
VMware cannot patch on-prem environments, and we need customers to resolve CVE-2021-44228 and CVE-2021-45046 by using one of the fixes provided in Knowledge Base Article 87073.Either can be used to address CVE-2021-44228 and CVE-2021-45046.Ĭustomers who have not taken steps to protect their Horizon environment, or who followed the guidance prior to these dates, should take the following action: 16th and workaround scripts were last updated on Dec. Customers who have deployed Unified Access Gateway (UAG) as part of their Horizon environment should follow the guidance given in UAG knowledge base article 87092, in addition to the Horizon guidance provided in our advisory.ĭue to additional disclosures from Apache Software Foundation, releases were last updated on Dec. Note that all internal and external Horizon components including Connection Server, Agent, Cloud Connector and UAG must address the Log4j vulnerabilities in an urgent manner. We continue to amplify the message in our security advisory, VMSA-2021-0028, urging customers to address the vulnerability immediately, including with VMware Horizon 8 and Horizon 7.x. In a zero-day situation such as the Apache Software Foundation Log4j vulnerability, cyber criminals are racing to exploit the vulnerabilities identified by CVE-2021-44228 and CVE-2021-45046 before organizations can address them. This post comes from VMware Security Engineering.
0 kommentar(er)
