Info
Document Version
Release Date
Details
3
March 14, 2022
Updated the Resolution, VMWare has provided fixes for CVE-2021-44228 and CVE-2021-45046 in vCenter Server Appliance 7.0 U3c.
2
January 5, 2022
Updated Resolution to add a note that the workaround is approved by HPE SimpliVity Engineering and has no negative impact on SimpliVity systems
1
December 22, 2021
Original document release
CVE 2021-44228 and CVE 2021-45046 have been determined to impact VMware vCenter Server 7.0.x, 6.7.x, and 6.5.x via the Apache Log4j open source component it ships. HPE SimpliVity systems running with any of the above vCenter Server versions are impacted.
Refer to the following URL for additional information:
https://logging.apache.org/log4j/2.x/
VMware vCenter versions supported by HPE SimpliVity OmniStack software releases are impacted on the following SimpliVity Platforms:
HPE SimpliVity 380 Gen9
HPE SimpliVity 380 Gen10
HPE SimpliVity 380 Gen10 G
HPE SimpliVity 380 Gen10 H
HPE SimpliVity 325 Gen10
HPE SimpliVity 325 Gen10 Plus v2
HPE SimpliVity 2600 Gen10
