VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD

The following Citrix products are affected;

• VMware ESXi
• VMware vCenter Server
• VMware Cloud Foundation

If Vulnerabilities are not addressed, a malicious threat actor with local administrator privileges on a virtual machine with an existing snapshot may trigger an out-of-bound read leading to a denial-of-service condition of the host.

CERTVU Encourages users and administrators to review the below and apply necessary security updates for the specific VMware listed in the “fixed version” column of the “Response Matrix” below to affected deployments.