VMSA-2020-0012 : VMware ESXi, Workstation and Fusion updates address out-of-bounds read vulnerability

a. VMware ESXi, Workstation and Fusion out-of-bounds read vulnerability CVE-2020-3960 Description : VMware ESXi, Workstation and Fusion contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine may be able to rea...

PT-2020-17818

Name of the Vulnerable Software and Affected Versions VMware Horizon Client for Windows versions prior to 5.4.3 Description The issue is due to folder permission configuration and unsafe loading of libraries, allowing a local user on the system where the software is installed to exploit this and...

VMware Releases Security Update for Horizon Client for Windows

VMware has released a security update to address a vulnerability in Horizon Client for Windows. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Securi...

Photon OS 1.0: Bindutils PHSA-2020-1.0-0298

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Linux PHSA-2020-1.0-0299

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0299. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137316...

VMware Fusion Horizon Client Remote Console Privilege Escalation

The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Cortado Thinprint VMware Workstation Horizon Client DoS

The vulnerability of the Cortado Thinprint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Photon OS 1.0: Nodejs PHSA-2020-1.0-0298

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13732...

PT-2020-17817

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 6.7 before ESXi670-202006401-SG VMware ESXi versions 6.5 before ESXi650-202005401-SG VMware Workstation versions 15.x before 15.5.5 VMware Fusion versions 11.x before 11.5.5 Description The issue concerns an out-of-bounds...

Advanced transport modes (HotAdd and SAN) fail over to NBD mode

Challenge Advanced transport modes Virtual Appliance HotAdd or Direct Storage access may not work, failing over to the NBD transport mode instead. If you are seeing error "Cannot use advanced transport modes, failing over to NBD " you should check the HotAdd attacher agent log default location -...

VMware Horizon Client for Windows update addresses privilege escalation vulnerability (CVE-2020-3961)

3. VMware Horizon Client for Windows privilege escalation vulnerability VMware Horizon Client for Windows contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. VMware has evaluated the severity of this issue to be in the Important...

KLA12097 OSI vulnerability in VMware Workstation and Player

Out of bounds read vulnerability vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2020-0012 Exploitation Public exploits exist for this vulnerability. Related products...

VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit

Exploit for java platform in category web applications Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit Author: Tomas Melicher Technical Details: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/ Vendor Homepage:...

VMware Cloud Director Remote Code Execution (CVE-2020-3956)

A remote code execution vulnerability exists in VMware Cloud Director. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco UCS Director Cloupia Script - Remote Code Execution

This Metasploit module exploits an authentication bypass and directory traversals in Cisco UCS Director This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Cloupia Script RCE',...

VMWare vCloud Director 9.7.0.15498291 - Remote Code Execution

VMWare vCloud Director version 9.7.0.15498291 suffers from a remote code execution vulnerability. Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit Author: Tomas Melicher Technical Details:...

Photon OS 3.0: Apache PHSA-2020-3.0-0100

An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137189;...

Photon OS 2.0: Glibc PHSA-2020-2.0-0248

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0248. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137198...

Photon OS 2.0: Erlang PHSA-2020-2.0-0251

An update of the erlang package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13719...

Photon OS 3.0: Linux PHSA-2020-3.0-0100

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137190;...