vRealize Operations Manager Administration showing system status with cluster status as online and "Take Offline" button.

Workaround instructions to address CVE-2021-44228 and CVE-2021-45046 in vRealize Operations 7.x

In this article I will go over one of the workaround instructions to address CVE-2021-44228 and CVE-2021-45046 in vRealize Operations 7.x. I have tested the workaround on vROPS 7.5 as its still shipped with VCF 3.x and I haven’t yet seen documentation on a workaround for this version. If you are looking for instructions for version 8.x consult kb article 87076. This has been tested on December 21 2021. Please check the official documentation or open a ticket for production usage. Where possible, moving to a release that ships with the fixed Log4j is the cleaner long-term option. I covered upgrading vROps to 8.6.2 via vRSLCM separately. ...

December 22, 2021 · Cosmin Trif