CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

Authentication flaw

VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2021-21999

Affected products: VMware Tools for Windows (11.x.y before 11.2.6), VMware Remote Console for Windows (12.x before 12.0.1), and VMware App Volumes (2.x before 2.18.10 and 4 before 2103). Root cause: local privilege escalation via placing a malicious file named openssl.cnf in an unrestricted direc...

CVE-2021-21998

VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to...

CVE-2021-21998

CVE-2021-21998 affects VMware Carbon Black App Control on versions 8.0, 8.1, 8.5 before 8.5.8, and 8.6 before 8.6.2. The issue is an authentication bypass that could let a network-accessible attacker obtain administrative access without authentication. Relevant sources note fixes: App Control 8.5...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in the VMware Carbon Black App Control management server as well as VMware Tools for Windows, VMware Remote Console for Windows, and VMware App Volumes. An attacker could exploit these vulnerabilities to take control of an affected...

VMware Workstation Tools Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the VGAuthService...

CVE-2021-21999: Uncontrolled Search Path Element

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2021-21998: Improper Authentication

VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to...

VMware Fusion 11.0.x < 11.5.7 Vulnerability (VMSA-2020-0029.1)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.7. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300...

VMware Workstation 15.0.x < 15.5.7 Vulnerability (VMSA-2020-0029.1)

The version of VMware Workstation installed on the remote host is 15.0.x prior to 15.5.7. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable...

Vulnerability fixed in VMware products

A vulnerability has been fixed in VMware products. The vulnerability allows a malicious party to obtain elevated privileges obtain in a Windows guest system. VMware has released updates to fix the vulnerability. More information can be found on the page below:...

PT-2021-3448

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 11.x.y prior to 11.2.6 VMware Remote Console for Windows versions 12.x prior to 12.0.1 VMware App Volumes versions 2.x prior to 2.18.10 VMware App Volumes version 4 prior to 2103 Description The issue is relat...

PT-2021-3449

Name of the Vulnerable Software and Affected Versions VMware Carbon Black App Control versions 8.0 through 8.1 VMware Carbon Black App Control versions 8.5 through 8.5.7 VMware Carbon Black App Control versions 8.6 through 8.6.1 Description The issue is related to authentication errors in the...

VMware Carbon Black App Control Authorization Issue Vulnerability

Vmware VMware Carbon Black App Control is an application control product from Vmware USA. It is used to lock down servers and critical systems to prevent unwanted changes. An authorization issue vulnerability exists in VMware Carbon Black App Control 8.0, 8.1, 8.5 before 8.5.8, and 8.6 before...

Photon OS 1.0: Envoy PHSA-2021-1.0-0405

An update of the envoy package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0405. The text itself is copyright C VMware, Inc...

VMware Carbon Black App Control update addresses authentication bypass (CVE-2021-21998)

3. VMware Carbon Black App Control updates address authentication bypass CVE-2021-21998 The VMware Carbon Black App Control management server has an authentication bypass. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.4...

Photon OS 4.0: Lz4 PHSA-2021-4.0-0047

An update of the lz4 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0047. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Photon OS 1.0: Nss PHSA-2021-1.0-0404

An update of the nss package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0404. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...