CVE-2020-3977

VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...

CVE-2020-3977: Missing Authentication for Critical Function

VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...

PT-2020-4290

Name of the Vulnerable Software and Affected Versions: VMware Horizon DaaS versions 7.x and 8.x before 8.0.1 Update 1 Description: The issue is related to a broken authentication vulnerability due to a flaw in the way VMware Horizon DaaS handled the first factor authentication. This flaw may allo...

Horizon DaaS update addresses a broken authentication vulnerability (CVE-2020-3977)

3. Broken authentication vulnerability CVE-2020-3977 Horizon DaaS contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base...

Cortado ThinPrint VMware Workstation Horizon Client DoS

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...

Cortado ThinPrint parser EMR STRETCHDIBITS VMware Workstation Horizon Client XSS

The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a...

VMware Management Tools Authentication Bypass

The vulnerability of the virtual infrastructure management tools VMware vCenter Server and VMware ESXi hypervisor is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to cause partial service disruption from a remote location...

Cortado ThinPrint VMware Workstation Horizon Client Unauthorized Access

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

Cortado ThinPrint JPEG2000 Parser Unauthorized Access

The vulnerability of the Cortado ThinPrint parser for JPEG2000 on the VMware Workstation and Horizon Client for Windows hypervisor platform is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...

Cortado ThinPrint Parser Unauthorized Access

The vulnerability of the Cortado ThinPrint parser on the EMF platform in VMware Workstation and Horizon Client for Windows involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

VMware App Volumes XSS

The vulnerability of the application and user management software for various VMware App Volumes virtual environments is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

VMware Fusion Privilege Escalation

The vulnerability of VMware Fusion relates to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Photon OS 2.0: Linux PHSA-2020-2.0-0283

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0283. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140709...

Photon OS 1.0: Gettext PHSA-2020-1.0-0326

An update of the gettext package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0326. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Openssl PHSA-2020-3.0-0141

An update of the openssl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0141. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140703;...

Photon OS 2.0: Envoy PHSA-2020-2.0-0285

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0285. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140713...

Photon OS 3.0: Cifs PHSA-2020-3.0-0142

An update of the cifs package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0142. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140705;...

Photon OS 1.0: Openssl PHSA-2020-1.0-0324

An update of the openssl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0324. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Commons PHSA-2020-3.0-0141

An update of the commons package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0141. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140702;...

Photon OS 3.0: Linux PHSA-2020-3.0-0142

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0142. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140708;...