description: VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
problem types: Remote Command Execution
affected:
{
product: vSphere Data Protection (VDP)
vendor: VMware
versions:
status: affected, version: 6.1.x
status: affected, version: 6.0.x
status: affected, version: 5.8.x
status: affected, version: 5.5.x
}