VMSA-2021-0007:VMware vRealize Business for Cloud updates address a remote code execution vulnerability

Advisory ID: VMSA-2021-0007 CVSSv3 Range: 9.8 Issue Date:2021-05-05 Updated On: 2021-05-05 Initial Advisory CVEs: CVE-2021-21984 Synopsis: VMware vRealize Business for Cloud updates address a remote code execution vulnerability CVE-2021-21984 RSS Feed Download PDF Download Text File Share this pa...

Metasploit Wrap-Up

Operations shell Operations and management software make popular targets due to their users typically having elevated privileges across a network. Our own wvu contributed the VMware vRealize Operations vROps Manager SSRF RCE exploit module for the vulnerabilities discovered by security researcher...

Photon OS 3.0: Cairo PHSA-2021-3.0-0226

An update of the cairo package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0226. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149048...

Photon OS 4.0: Go PHSA-2021-4.0-0013

An update of the go package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149054;...

Photon OS 4.0: Wpa_Supplicant PHSA-2021-4.0-0014

An update of the wpasupplicant package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2021-4.0-0013

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149053...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution Exploit

This Metasploit module exploits a pre-auth server-side request forgery CVE-2021-21975 and post-auth file write CVE-2021-21983 in VMware vRealize Operations Manager to leak admin creds and write/execute a JSP payload. CVE-2021-21975 affects the /casa/nodes/thumbprints endpoint, and CVE-2021-21983...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware vRealize Operations vROps Manager SSRF RCE', 'Description' = %q This module exploits a pre-auth SSRF CVE-2021-21975 and post-auth file wri...

Exploit for Path Traversal in Vmware Cloud_Foundation

vsphereyeeter.sh is an automated bash script to exploit vuln...

VMware Carbon Black Delivers High-Fidelity Insight at Every Step of MITRE Engenuity ATT&CK® Evaluation

For the third year in a row, VMware Carbon Black today announced its participation in MITRE Engenuity’s third annual ATT&CK® Evaluations with VMware Carbon Black Cloud. VMware Carbon Black Cloud delivered robust telemetry coverage with correlated, high-fidelity alerts at each and every step of th...

Photon OS 3.0: Nettle PHSA-2021-3.0-0223

An update of the nettle package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148907;...

Photon OS 4.0: Rust PHSA-2021-4.0-0012

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0012. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148910;...

Photon OS 3.0: Rust PHSA-2021-3.0-0223

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148908;...

Photon OS 3.0: Linux PHSA-2021-3.0-0221

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0221. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148901;...

VMware NSX-T Privilege License and Access Control Issues Vulnerability

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

VMware Releases Security Update

VMware has released a security update to address a vulnerability affecting NSX-T. An attacker can exploit this vulnerability to take control of an affected system CISA encourages users and administrators to review VMSA-2021-0006 and apply the necessary update and workaround. This product is...

Photon OS 1.0: Linux PHSA-2021-1.0-0382

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0382. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148823...

Photon OS 1.0: C PHSA-2021-1.0-0378

An update of the c package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0378. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148814;...

Photon OS 1.0: Openvswitch PHSA-2021-1.0-0381

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Redis PHSA-2021-2.0-0336

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0336. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148824...