CVE-2020-3956

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...

CVE-2020-3956

CVE-2020-3956 affects VMware Cloud Director; an authenticated attacker can exploit an Expression Injection vulnerability in input handling (notably SMTP host/name processing) to achieve remote code execution via HTML5/Flex UI or API interfaces. Impact is arbitrary RCE with network access, as indi...

VMware Releases Security Update for Cloud Director

VMware has released security updates to address a vulnerability in VMware Cloud Director formerly known as vCloud Director. A remote attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

CVE-2020-3956: VMware Cloud Director Code Injection Vulnerability

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...

PT-2020-3052

Name of the Vulnerable Software and Affected Versions VMware Cloud Director versions 9.1.0.x through 9.1.0.3 VMware Cloud Director versions 9.5.0.x through 9.5.0.5 VMware Cloud Director versions 9.7.0.x through 9.7.0.4 VMware Cloud Director versions 10.0.x through 10.0.0.1 Description The issue i...

CVE-2020-3956: Improper Neutralization of Special Elements used in an Expression Language Statement

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...

Photon OS 3.0: Iproute2 PHSA-2020-3.0-0091

An update of the iproute2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0091. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136698;...

Photon OS 2.0: Git PHSA-2020-2.0-0243

An update of the git package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0243. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136697;...

Photon OS 1.0: Salt3 PHSA-2020-1.0-0294

An update of the salt3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136695...

Photon OS 3.0: Salt3 PHSA-2020-3.0-0091

An update of the salt3 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0091. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136699;...

Photon OS 1.0: Salt PHSA-2020-1.0-0294

An update of the salt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0294. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136694;...

VMSA-2020-0011:VMware ESXi, Workstation, Fusion, VMware Remote Console and Horizon Client updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0011.1 CVSSv3 Range: 3.3-7.3 Issue Date:2020-05-28 Updated On: 2020-07-09 CVEs: CVE-2020-3957, CVE-2020-3958, CVE-2020-3959 Synopsis: VMware ESXi, Workstation, Fusion, VMware Remote Console and Horizon Client updates address multiple security vulnerabilities CVE-2020-3957,...

VMware Spring Security Data Forgery Issue Vulnerability

VMware Spring Security is a set of security frameworks from VMware that provide illustrative security for Spring-based applications. A data forgery issue vulnerability exists in VMware Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2. A remote attacker could exploit this...

VMware Launches Next-Gen SOC Alliance with Splunk, IBM Security, Google Cloud’s Chronicle, Exabeam, and Sumo Logic

Today at Connect 2020, our company's annul cybersecurity conference, we made some exciting announcements, including the creation of a Next-Gen SOC Alliance. The alliance empowers SOC teams with visibility, prevention, detection and response capabilities that can uniquely leverage the VMware fabri...

Photon OS 1.0: Ntp PHSA-2020-1.0-0292

An update of the ntp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0292. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136557;...

Photon OS 2.0: Docker PHSA-2020-2.0-0241

An update of the docker package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0241. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13656...

Photon OS 1.0: Docker PHSA-2020-1.0-0292

An update of the docker package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0292. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13655...

Photon OS 3.0: Go PHSA-2020-3.0-0087

An update of the go package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0087. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136575;...

Photon OS 3.0: Kibana PHSA-2020-3.0-0088

An update of the kibana package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0088. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136578;...

Photon OS 3.0: Linux PHSA-2020-3.0-0089

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0089. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136579;...