KB 83829 How to Disable VMware Plugins in vCenter Server

preview_player
Показать описание
KB 83829 How to Disable VMware Plugins in vCenter Server

Vulnerabilities in plugins that ship with vCenter Server have been disclosed by VMware. These vulnerabilities and their impact on VMware products are documented in the following VMware Security Advisories (VMSAs):
- CVE-2021-21972 - VMSA-2021-0002 (vRealize Operations Manager Plugin)
- CVE-2021-21985 - VMSA-2021-0010 (Virtual SAN Health Check Plugin)
- CVE-2021-21986 - VMSA-2021-0010 (Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability Plugins)

Рекомендации по теме
Комментарии
Автор

Thank you for sharing the steps. Hope dellEMC team will release the patch for VxRail soon..!!

shameerahmedmca
Автор

So... Why did you disable the plug-ins if it is already certified by vmWare? Doesn't that mean that they ARE compatible? Shouldn't be doing the ones that are deployed are not vMWare certifed? but
A little confused. These are the steps, right? (below)

Steps:
SSH to vSphere client

Create a backup
. cp -v
. ls -ilash

Edit .xml file
. vi

Enter plug-in names between --> and <--

Stop vShpere-ui
- service-control --stop vsphere-ui

Start vSphere-ui
service-control --start vsphere-ui

rfrancoi