Vulnerability Spotlight: Data deserialization in VMware vCenter could lead to remote code execution
Marcin "Icewall" Noga of Cisco Talos discovered a post-authentication Java deserialization vulnerability in VMware vCenter, tracked as TALOS-2022-1587 (CVE-2022-31680), that is triggered by a specially crafted HTTP request and could allow an attacker to...