That critical VMware vuln allowed anyone on your network to create new admin users, no creds needed

Reason behind murky CVSS 10 score revealed by Guardicore

A critical vulnerability in VMware's vCenter management product allowed any old bod on the same network to remotely create an admin-level user, research by Guardicore Labs has revealed."