Python script to automate the workaround steps of VMSA-2021-0028 vulnerability on vCenter Server App

[robertandru]

Does anybody know how to break this script and chack only the validation part later? https://kb.vmware.com/s/article/87088

Pyton script only verify the vulnerability status.

Cheers,

[doskiran]

VMware vCenter Server Workaround KB -> KB87081 

Script vc_log4j_mitigator.py(attached in above KB) will now mitigate CVE-2021-44228 and CVE-2021-45046 on vCenter Server end-to-end without extra steps. This script replaces the need to run remove_log4j_class.py and vmsa-2021-0028-kb87081.py independently. However, it is not necessary to run if you've already used those in your environment.

To List the vulnerable files in vCenter, run script with dryrun option:

$ python vc_log4j_mitigator.py -r