Low: Red Hat Security Advisory: OpenShift Virtualization 2.4.2 Images

Red Hat OpenShift Virtualization release 2.4.2 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a...

Instrument VMware Virtual Machines for Security and Compliance

How do you ensure Qualys is managing the security and compliance of all your VMware workloads? First, you need to have Qualys Cloud Agent installed and running on all of your VMware virtual machines. While VMware vCenter knows the exact inventory of your virtual machines at all times, it doesn’t...

VMware Fusion Horizon Client Remote Console Privilege Escalation

The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

VeloCloud Orchestrator SQL Injection

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

Security Bulletin: IBM Cloud Pak System is affected by a vulnerability in VMware component

Summary A vulnerability is reported in the VMWare component, and this component is used by IBM Cloud Pak System. IBM Cloud Pak System addressed applicable CVE. Vulnerability Details CVEID: CVE-2020-3959 DESCRIPTION: Multiple VMware products are vulnerable to a denial of service, caused by a memor...

Photon OS 1.0: Linux PHSA-2020-1.0-0328

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0328. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141096...

Photon OS 1.0: Linux PHSA-2020-1.0-0329

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0329. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141091...

Photon OS 2.0: Linux PHSA-2020-2.0-0287

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141098...

Better Secure and Manage Endpoints in a Remote Work World

The global pandemic has quickly changed how and where we work. Remote work is now the ‘new normal.’ Amid the massive transition, a June survey by S&P Global found: More than two-thirds of companies may be working from home forever Offices that do remain will probably shrink: 47% of respondents sa...

VMworld 2020: Delivering Intrinsic Security to the World’s Digital Infrastructure

A year ago, we bet big, with a vision to truly disrupt the security industry — and ultimately help more customers stay safe from cyber attacks. The VMware acquisition of Carbon Black created a massive opportunity to leverage infrastructure and control points in new ways to make security intrinsic...

Introducing VMware Carbon Black Cloud Workload™

If you know Carbon Black, you know that we helped invent Endpoint Detection and Response EDR and pioneered the field of next-generation anti-virus NGAV and malware protection. If you know VMware, you know we helped invent virtualization and have championed moving core business servers and service...

EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-2097)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c.CVE-2019-15890 - QEMU 4.1.0 has a memory leak in...

VMware Workstation 15.x < 15.5.7 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Workstation installed on the remote host is 15.x. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A malicious actor with norm...

VMware Fusion 11.x < 11.5.7 Privilege Escalation (VMSA-2020-0020)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x. It is, therefore, affected by a privilege escalation vulnerability due to the way it allows configuring the system wide path. An authenticated, local attacker with normal user privileges can exploit this issue to...

VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)

The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...

Photon OS 3.0: Linux PHSA-2020-3.0-0144

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0144. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140785;...

CVE-2020-3977

VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...

CVE-2020-3977

VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...

Authentication flaw

VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...

CVE-2020-3977

CVE-2020-3977 affects VMware Horizon DaaS 7.x and 8.x prior to 8.0.1 Update 1. Root cause: broken authentication due to how first-factor authentication is handled, enabling potential bypass of two-factor authentication for an attacker with a legitimate Horizon DaaS account. Impact: partial integr...