There is a critical vulnerability tracked by CVE-2017-5641. This vulnerability affects the vCenter Server Appliance and vCenter Server on Windows.
This article provides a workaround for the security issue CVE-2017-5641 by removing the telemetry plugins of vSphere Web Client. Before applying the workaround, see
VMSA-2017-0007 for fixes and up to date information on this vulnerability.
The following versions of the vCenter Server Appliance and vCenter Server are impacted with the CVE-2017-5641 issue:
- VMware vCenter Server Appliance 6.5
- VMware vCenter Server 6.5
Functionality Impact: The Customer Experience Improvement Program will stop working which will result in not sending vCenter and vSphere web client telemetry data to VMware.