VMware Releases Multiple Security Updates

VMware has released security updates to address multiple vulnerabilities—CVE-2021-21972, CVE-2021-21973, CVE-2021-21974—in ESXi, vCenter Server, and Cloud Foundation. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

VMware vCenter Server 代码问题漏洞

VMware Cloud Foundation is a hybrid cloud platform developed by VMware based on the HCI architecture that enables consistent, secure infrastructure and operations between private and public clouds. VMware vSphere Client server-side request forgery vulnerability can be exploited by an attacker wit...

CVE-2021-21973

The vSphere Client HTML5 contains an SSRF Server Side Request Forgery vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information...

VMware vSphere Client Server-Side Request Forgery Vulnerability

VMware Cloud Foundation is a hybrid cloud platform developed by VMware based on the HCI architecture that enables consistent, secure infrastructure and operations between private and public clouds. VMware vSphere Client server-side request forgery vulnerability can be exploited by an attacker wit...

VMware vSphere Client Unauth Remote Code Execution Vulnerability — CVE-2021-21972

The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects...

VMware vCenter Server Unauthenticated OVA File Upload RCE

This module exploits an unauthenticated OVA file upload and path traversal in VMware vCenter Server to write a JSP payload to a web-accessible directory. Fixed versions are 6.5 Update 3n, 6.7 Update 3l, and 7.0 Update 1c. Note that later vulnerable versions of the Linux appliance aren't exploitab...

PT-2021-2131

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 before 6.5 U3n VMware vCenter Server versions 6.7 before 6.7 U3l VMware vCenter Server versions 7.x before 7.0 U1c VMware Cloud Foundation versions 3.x before 3.10.1.2 VMware Cloud Foundation versions 4.x...

VMSA-2021-0002:VMware ESXi and vCenter Server updates address multiple security vulnerabilities

Advisory ID: VMSA-2021-0002 CVSSv3 Range: 5.3-9.8 Issue Date:2021-02-23 Updated On: 2021-02-23 Initial Advisory CVEs: CVE-2021-21972, CVE-2021-21973, CVE-2021-21974 Synopsis: VMware ESXi and vCenter Server updates address multiple security vulnerabilities CVE-2021-21972, CVE-2021-21973,...

The vulnerability of the management interface for the virtual infrastructure management tool VMware vCenter Server allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the management interface for VMware vCenter Server’s virtual infrastructure is related to deficiencies in verifying the authenticity of certificates. Exploiting this vulnerability allows a malicious actor to compromise the integrity, confidentiality, and accessibility of the...

CVE-2020-3994

VMware vCenter Server 6.7 before 6.7u3, 6.6 before 6.5u3k contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repositor...

Session fixation

VMware vCenter Server 6.7 before 6.7u3, 6.6 before 6.5u3k contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repositor...

CVE-2020-3994

VMware vCenter Server 6.7 before 6.7u3, 6.6 before 6.5u3k contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repositor...

CVE-2020-3994

CVE-2020-3994 affects VMware vCenter Server (versions 6.7 before 6.7u3, 6.6 before 6.5u3k). It is a session hijack vulnerability in the vCenter Server Appliance Management Interface (VAMI) update function caused by a lack of certificate validation. An attacker with network position between vCente...

VMware ESXi, Workstation, Fusion and NSX-T updates address multiple security vulnerabilities (CVE-2020-3981, CVE-2020-3982, CVE-2020-3992, CVE-2020-3993, CVE-2020-3994, CVE-2020-3995)

3a. ESXi OpenSLP remote code execution vulnerability CVE-2020-3992 OpenSLP as used in ESXi has a use-after-free issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 3b. NSX-T MITM vulnerability CVE-2020-3993 VMware...

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, related to authentication deficiencies, allows attackers to cause partial service interruptions.

The vulnerability of the virtual infrastructure management tools VMware vCenter Server and VMware ESXi hypervisor is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to cause partial service disruption from a remote location...

VMware vCenter Server 6.5 / 6.7 / 7.0 DoS (VMSA-2020-0018)

The version of VMware vCenter Server installed on the remote host is 6.5 prior to 6.5u3k, 6.7 prior to 6.7u3j or 7.0 prior to 7.0.0b. It is, therefore, affected by a denial of service vulnerability DoS in the authentication service. An unauthenticated, remote attacker can exploit this issue to...

VMSA-2020-0018 : VMware ESXi, vCenter Server, and Cloud Foundation updates address a partial denial of service vulnerability

a. Partial denial of service vulnerability via authentication services CVE-2020-3976 VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. A malicious actor with network access to ESXi or vCenter may be able to exploit this...

CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

Denial of service

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

CVE-2020-3976

CVE-2020-3976 affects VMware ESXi and vCenter Server, describing a partial denial-of-service in their authentication services. The public details identify a moderate impact (CVSSv3 base score 5.3) with network access required and low attack complexity, but do not provide exploit specifics in the ...