VMware vRealize Operations log information leakage vulnerability

vmware VMware vRealize Operations is an application from vmware, Inc. A unified, AI-based platform for private, hybrid, and multi-cloud environments that delivers IT operations management on autopilot. A log information disclosure vulnerability exists in Vmware vRealize Operations Manager that...

SFCB Service Authentication Bypass

The vulnerability of the SFCB Small Footprint CIM Broker service of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication...

Photon OS 3.0: Rust PHSA-2021-3.0-0288

An update of the rust package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0288. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Photon OS 2.0: Util PHSA-2021-2.0-0379

An update of the util package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0379. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Photon OS 1.0: Mysql PHSA-2021-1.0-0427

An update of the mysql package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0427. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Mysql PHSA-2021-2.0-0381

An update of the mysql package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0381. The text itself is copyright C VMware, Inc...

Photon OS 4.0: Redis PHSA-2021-4.0-0083

An update of the redis package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0083. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Photon OS 4.0: Ruby PHSA-2021-4.0-0084

An update of the ruby package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0084. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-38598 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-38598 Source advisory: OSV:PYSEC-2021-360...

networking-bagpipe (>=8.0.1, <=10.0.1), networking-baremetal (1.0.1) +8 more potentially affected by CVE-2021-38598 via neutron (>=12.1.1, <=15.3.4)

neutron PYPI version =12.1.1, =8.0.1, =15.0.0, =13.0.1, =5.1.0, =13.0.2, =13.0.2, =14.0.1, =14.3.0 Source cves: CVE-2021-38598 Source advisory: MEND:CVE-2021-38598...

VMSA-2021-0018:VMware vRealize Operations updates address multiple security vulnerabilities

Advisory ID: VMSA-2021-0018 CVSSv3 Range: 4.4 - 8.6 Issue Date:2021-08-24 Updated On: 2021-08-24 Initial Advisory CVEs: CVE-2021-22022, CVE-2021-22023, CVE-2021-22024, CVE-2021-22025, CVE-2021-22026, CVE-2021-22027 Synopsis: VMware vRealize Operations updates address multiple security...

VMSA-2021-0019:VMware vRealize Log Insight updates address Cross Site Scripting (XSS) vulnerability

Advisory ID: VMSA-2021-0019 CVSSv3 Range: 6.5 Issue Date:2021-08-24 Updated On: 2021-08-24 Initial Advisory CVEs: CVE-2021-22021 Synopsis: VMware vRealize Log Insight updates address Cross Site Scripting XSS vulnerability CVE-2021-22021 RSS Feed Download PDF Download Text File Share this page on...

VMware Harbor User Enumeration (CVE-2020-13794)

Binary data vmwareharborCVE-2020-13794direct.nbin...

Vmware Workspace One security vulnerabilities

Vmware Vmware Workspace One is a platform for supporting cross-device applications for rapid delivery and management of applications from Vmware, USA. The platform, which includes VMware Horizon and VMware Horizon Cloud, integrates access control, application management, and multi-platform endpoi...

VMware Harbor User Enumeration (CVE-2019-3990)

Binary data vmwareharborCVE-2019-3990direct.nbin...

VMware Workspace ONE UEM console patches address a denial of service vulnerability (CVE-2021-22029)

3. Advisory Details VMware Workspace ONE UEM REST API contains a denial of service vulnerability. VMware has evaluated this issue to be of 'Moderate' severity with a maximum CVSSv3 base score of 5.3...

PT-2021-4672

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE UEM affected versions not specified Description The issue is related to a denial of service vulnerability in the VMware Workspace ONE UEM REST API, caused by improper rate limiting in the endpoint. This could allow a remot...

Photon OS 2.0: C PHSA-2021-2.0-0378

An update of the c package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0378. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc';...

Photon OS 3.0: C PHSA-2021-3.0-0282

An update of the c package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0282. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc';...