...
The vulnerability CVE-2021-45105 will be patched in the next vProtect release (information in this article will be updated as soon as the fixed version will be released) however it’s worth mentioning that this CVE causes a Denial of Service attack which poses a low risk to end-users as vProtect installations should not be exposed to the Internet and, as for the moment of writing this article, there are no known ways to exploit this vulnerability in vProtect software. vProtect uses Payara software which authors state that they are it is not vulnerable.[1]
Related articles
...