Multiple vulnerabilities have been reported in VMware vCenter Server, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a vulnerable system.

VMWare vCenter Server bundles a vulnerable version of Apache Struts.

For more information:
SA32497
SA40575

Solution
Apply updates (please see the vendor's advisory for details).

Provided and/or discovered by
The vendor credits Vulnerability Research Team, Digital Defense

Changelog
Further details available to Secunia VIM customers

Original Advisory
VMware (VMSA-2011-0005, VMSA-2011-0005.3):
http://www.vmware.com/security/advisories/VMSA-2011-0005.html
http://kb.vmware.com/kb/1034175
http://lists.vmware.com/pipermail/security-announce/2011/000152.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers