VMware vCenter Server Virtual SAN Health Check plug-in Remote OS Command Injection Exploit

A java unsafe reflection and a Server Side Request Forgery vulnerabilities present in ProxygenController class of VMware vCenter Server Virtual SAN Health Check plugin allows remote attackers to execute commands in the context of the vsphere-ui user account.
Exploit Platform
Product Name