15037 matches found
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
Information disclosure
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...
Authentication flaw
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
Privilege escalation
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
Information disclosure
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...
Design/Logic Flaw
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
What we know about VMWare CVE-2022–31656 and CVE-2022–31659
Takeaways: VMWare Workspace ONE vulnerabilities CVE-2022-31656 and CVE-2022-31659 work in tandem to allow a remote attacker with network access to conduct remote code execution on the server. Imperva Threat Research has seen a sharp rise in attacks since a POC was published on August 9, mostly...
ignition: configs are accessible from unprivileged containers in VMs running on VMware products
A vulnerability was found in Ignition, where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets...
Intel Ethernet VMWare driver security vulnerabilities
Intel Ethernet VMWare drivers is an Ethernet VMWare driver from Intel Corporation USA. A security vulnerability exists in Intel Ethernet VMWare drivers that stems from insufficient control flow management. An attacker could exploit this vulnerability to conduct a denial of service attack...
VMware vRealize Operations security vulnerabilities
VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4, which stems from an...
VMware vRealize Operations log information leakage vulnerability
VMware vRealize Operations is an application from VMware, Inc. a unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4 that originates from a...
CVE-2022-31673: Exposure of Sensitive Information to an Unauthorized Actor
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...
VMware vRealize Operations security vulnerabilities
VMware vRealize Operations is an application from VMware, Inc. a unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4 that originates from a...
VulnCheck KEV: CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
VMware vRealize Operations security vulnerabilities
VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid, and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4, which can be exploited by...