UCSF IT Technology

Cisco has released security updates to address a Critical-risk vulnerability that was detected within the web-based management interface of Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM). A remote attacker could exploit these vulnerabilities to take control of an affected system.

Microsoft has released security updates to address a Critical-risk vulnerability that exists within the IKE Extension component in Microsoft Windows Server 2022 and earlier. A remote attacker could exploit these vulnerabilities to take control of an affected system. For a complete description of the vulnerabilities and effected systems, visit Microsoft security update guide vulnerabilities (CVE-2022-21849).

VMware has released a security advisory to address a High vulnerability in Workstation, Fusion, and ESXi. An attacker could exploit this vulnerability to take control of an affected system For a complete description of the vulnerabilities and effected systems, visit VMware Security Advisory. Read more about IT Security service offerings.

VMware has released a security advisory to address a critical vulnerability in Workspace ONE UEM console. An attacker could exploit this vulnerability to obtain sensitive information.  For a complete description of the vulnerabilities and effected systems, visit VMware Security Advisory VMSA-2021-0029

Apache has released an Important security update to address a second vulnerability in the Apache Log4j utility. Patch 2.16.0 has been released since the previous patch 2.15.0 did not fully remediate the vulnerability. A remote attacker could exploit this new vulnerability to cause a Denial of Service (DoS) attack.