Details
The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, Web-based functionality. vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
From the vSphere Web Client go to Administration >> Solutions >> Client Plug-Ins and right click the unknown plug-in and click disable then proceed to remove the plug-in.
To remove plug-ins do the following:
If you have vCenter Server in linked mode, perform this procedure on the vCenter Server that is used to install the plug-in initially, then restart the vCenter Server services on the linked vCenter Server.
In a web browser, navigate to http://vCenter_Server_name_or_IP/mob.
Where vCenter_Server_name_or_IP/mob is the name of your vCenter Server or its IP address.
Click Content.
Click ExtensionManager.
Select and copy the name of the plug-in you want to remove from the list of values under Properties. For a list of default plug-ins, see the Additional Information section of this article.
Click UnregisterExtension. A new window appears.
Paste the name of the plug-in and click Invoke Method. This removes the plug-in.
Close the window.
Refresh the Managed Object Type:ManagedObjectReference:ExtensionManager window to verify that the plug-in is removed successfully.
Note: If the plug-in still appears, you may have to restart the vSphere Client.
Note: You may have to enable the Managed Object Browser (MOB) temporarily if previously disabled.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system VMware.
References
- 800-53|CM-6b.
- CAT|II
- CCI|CCI-000366
- Rule-ID|SV-216857r612237_rule
- STIG-ID|VCWN-65-000035
- STIG-Legacy|SV-104609
- STIG-Legacy|V-94779
- Vuln-ID|V-216857