The vulnerability of the vgauth module of the VMware Tools component in the VMware ESXi hypervisor allows a attacker to influence the confidentiality and integrity of the protected information.

🗓️ 15 Jun 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vgauth vulnerability in VMware Tools for ESXi enables authentication errors that compromise confidentiality and integrity.

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition vulnerable to security bypass due to open-vm-tools (CVE-2023-20867)	29 Jul 202421:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition affected by bypass vulnerability in Open VM Tools	14 May 202415:03	–	ibm
ATTACKERKB	CVE-2023-20867	13 Jun 202300:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2023-259)	20 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : open-vm-tools (ALAS-2023-2139)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0076: open-vm-tools (ALINUX3-SA-2023:0076)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 9 : open-vm-tools-12.2.0-3.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 7 : open-vm-tools (RHSA-2023:3944)	28 Jul 202300:00	–	nessus

Vulners

Node

broadcom vmware_toolsRange<12.2.5

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2023-0013.html
altsp	www.altsp.su/obnovleniya-bezopasnosti/
abf	www.abf.rosalinux.ru/advisories/ROSA-SA-2023-2201
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.9/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
web	www.web.nvd.nist.gov/view/vuln/detail
vmware	www.vmware.com/security/advisories/VMSA-2023-0013.html

11 Nov 2024 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 22.3

CVSS 33.9

EPSS0.13638

vgauth vulnerability vmware tools vmware hypervisor authentication errors confidentiality integrity