CVE-2021-26987: Critical severity vmware spring boot tools vulnerability
Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26987?
CVE-2021-26987 is a vulnerability in the Element Plug-in for vCenter Server that incorporates the SpringBoot Framework and allows for remote code execution.
What is the severity of CVE-2021-26987?
CVE-2021-26987 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2021-26987?
CVE-2021-26987 affects SpringBoot Framework versions prior to 1.3.2, as well as all versions of Element Plug-in for vCenter Server and Netapp Management Services.
How can CVE-2021-26987 be exploited?
CVE-2021-26987 can be exploited to achieve remote code execution.
Where can I find more information about CVE-2021-26987?
More information about CVE-2021-26987 can be found at this [link](https://security.netapp.com/advisory/ntap-20210315-0001/).