Photon OS 2.0: Linux PHSA-2020-2.0-0272

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0272. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139610...

Photon OS 2.0: Kubernetes PHSA-2020-2.0-0270

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0270. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Kubernetes PHSA-2020-3.0-0123

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0123. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Nodejs PHSA-2020-1.0-0312

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0312. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13950...

The Future of Security: Lessons from Black Hat USA

For the last 23 years, Black Hat has been the world’s leading information security event where attendees are able to experience the latest security research, development, and trends. While 2020 marks the first year that Black Hat will be virtual, it does not limit the level of engaging content th...

Citrix Cloud - Hosting connection to VMWare vCenter Server fails after certificate update

Hosting connection to VMWare vCenter Server fails after certificate update...

Moderate: Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container Updated Named URLs to allow for testing the presence or absence of objects CVE-2020-14337 Fixed Tower Server Side Request Forgery on Credentials CVE-2020-14327 Fixed Tower Server Side Request Forgery on Webhooks CVE-2020-14328 Fixed Tower sensitive...

NetApp Active IQ Unified Manager Denial of Service Vulnerability

NetApp Active IQ Unified Manager is an ONTAP storage product monitoring and management solution from US-based NetApp. The product supports features such as performance monitoring and secret key management. A security vulnerability exists in NetApp Active IQ Unified Manager VMware vSphere and...

GRUB2 Boothole Buffer Overflow Vulnerability (CVE-2020-10713) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®

On July 29, 2020, Eclypsium researchers disclosed a high-risk vulnerability in GRUB2 GRand Unified Bootloader version 2 affecting billions of Linux and Windows systems, even when secure boot is enabled. CVE-2020-10713 is assigned to this buffer overflow vulnerability, termed as “Boothole”...

CVE-2020-8575

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

CVE-2020-8575

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

CVE-2020-8575

CVE-2020-8575 affects NetApp Active IQ Unified Manager for VMware vSphere and Windows prior to 9.5. Multiple connected documents (Red Hat, CNVD, CVE lists) consistently describe a vulnerability that allows administrative users to cause Denial of Service (DoS). The precise root cause, vulnerable c...

CVE-2020-8575: Undefined Security Weakness

Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrative users to cause Denial of Service DoS...

PT-2020-20218

Name of the Vulnerable Software and Affected Versions Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 Description The issue allows administrative users to cause a Denial of Service DoS. Recommendations For versions prior to 9.5, update to version 9.5 or later to...

Photon OS 1.0: Grub2 PHSA-2020-1.0-0311

An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0311. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139242...

Photon OS 2.0: Grub2 PHSA-2020-2.0-0267

An update of the grub2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0267. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139243...

CVE-2020-5414

VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...

CVE-2020-5414

VMware Tanzu Application Service for VMs 2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7 contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Operations Manager; however, the unredacted logs are...

CVE-2019-11286

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against t...

CVE-2019-11286

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against t...