PT-2020-3954

Name of the Vulnerable Software and Affected Versions: VMware Fusion versions 11.x Description: The issue is related to a privilege escalation vulnerability due to the way VMware Fusion configures the system-wide path. An attacker with normal user privileges may exploit this issue to trick an adm...

PT-2020-3950

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4 Description: The issue is related to an out-of-bounds write in the Cortado ThinPrint component, which can lead to a denial of service condition. A malicious...

PT-2020-3952

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4 Description: The issue is related to an out-of-bounds read in the Cortado ThinPrint component's EMR STRETCHDIBITS parser, which can be exploited by a remote...

PT-2020-3951

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 15.x Horizon Client for Windows versions 5.x before 5.4.4 Description: The issue is related to an out-of-bounds read in the Cortado ThinPrint component, specifically the JPEG2000 parser, which can be exploited by a...

VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities (CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990)

3a. PATH configuration privilege escalation vulnerability CVE-2020-3980 VMware Fusion contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3...

VMSA-2020-0020:VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0020.1 CVSSv3 Range: 3.8-6.7 Issue Date:2020-09-14 Updated On: 2020-11-19 CVEs: CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990 Synopsis: VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities...

Security Bulletin: Vulnerability in side channel in Intel CPUs affect IBM Cloud Pak System (CVE-2019-11135)

Summary IBM Cloud Pak System when using Intel CPUs could allow a local authenticated attacker to obtain sensitive information. OS image for RedHat Enterprise Linux for Cloud Pak System is shipped as component for IBM Cloud Pak System. OS image for RedHat Enterprise Linux addressed vulnerability...

Photon OS 1.0: Linux PHSA-2020-1.0-0323

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0323. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140495...

Top Three Demos at VMworld 2020: Security, Threat Hunting, and Beyond

VMworld 2020 Sept. 29- Oct. 1 is fast approaching. This year, and for the first time ever, VMworld will showcase a new intrinsic security track featuring 50+ sessions on the future of workspace and workload security. Attendees will have the opportunity to participate in hands-on workshops, hunt f...

The U.S. Secret Service Selects Tom Kellermann to Serve on Inaugural Cyber Investigations Advisory Board

Cybersecurity has become a recurring global news headline. From ransomware to data breaches, cyberattacks continue to be one of the biggest threats to both the private and public sectors. Earlier this year, the FBI reported a 400 percent increase in cybercrime1. And for the public sector, this is...

VMware Carbon Black First to Block Hidden Malicious Commands in Obfuscated Scripts

For a long time now, our Threat Analysts have flagged the growing threat of script-based attacks, especially from Microsoft PowerShell and Windows Management Interface script commands, and their ability to escape notice in many antivirus solutions. Increasingly, these types of attacks have become...

Photon OS 3.0: Kibana PHSA-2020-3.0-0135

An update of the kibana package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140411;...

Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0135

An update of the elasticsearch package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140410;...

Unspecified Vulnerability in VMware Spring Cloud Netflix

Spring Cloud Netflix is various Netflix OSS component integrations. A security vulnerability exists in VMware Spring Cloud Netflix versions 2.2.x prior to 2.2.4, 2.1.x prior to 2.1.6, and unsupported older versions, which can be exploited by an attacker to send requests to other servers...

Photon OS 2.0: Net PHSA-2020-2.0-0279

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140115;...

Photon OS 2.0: Bindutils PHSA-2020-2.0-0279

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Pam_Tacplus PHSA-2020-2.0-0280

An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0280. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Ntp PHSA-2020-3.0-0133

An update of the ntp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0133. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140112;...

Photon OS 1.0: Pam_Tacplus PHSA-2020-1.0-0319

An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0319. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Redis PHSA-2020-2.0-0278

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0278. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140122...