VMware (vCenter Server) Data Breach

VMware (vCenter Server) experienced a data breach that was reported on January 22, 2024. VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.

Key Facts

Organization
VMware (vCenter Server)
Date Reported
January 22, 2024
Incident Type
web app exploit
Industry
Technology
Severity Score
5/10
Confidence Level
high
Tags
web app exploit

Source

View original source - External link to primary source documentation

Understanding web app exploit Incidents

Web application exploits target vulnerabilities in websites and APIs. Secure development practices, WAFs, and penetration testing protect against these attacks.