vcenter security bug