Lucene search

K
freebsdFreeBSDD2505EC7-78EA-11EE-9131-6F01853956D5
HistoryOct 26, 2023 - 12:00 a.m.

open-vm-tools -- Multiple vulnerabilities

2023-10-2600:00:00
vuxml.freebsd.org
5
vmware
update
saml
token
signature
bypass
vulnerability
file
descriptor
hijack

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.4%

VMware reports:

This update includes 2 security fixes:

High CVE-2023-34058: SAML token signature bypass vulnerability
High CVE-2023-34059: File descriptor hijack vulnerability in the vmware-user-suid-wrapper

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopen-vm-tools< 12.3.5UNKNOWN
FreeBSDanynoarchopen-vm-tools-nox11< 12.3.5UNKNOWN