EUVD-2020-26577

Malware in sbrugna...

EUVD-2019-2973

Malware in sbrugna...

CVE-2019-11286

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against t...

Default configuration

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...

CVE-2019-11286: Deserialization of Untrusted Data

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against t...

PT-2020-9185

Name of the Vulnerable Software and Affected Versions VMware GemFire versions prior to 9.10.0 VMware GemFire versions 9.9.1 and earlier VMware GemFire versions 9.8.5 and earlier VMware GemFire versions 9.7.5 and earlier VMware Tanzu GemFire for VMs versions prior to 1.11.0 VMware Tanzu GemFire fo...

PT-2020-18454

Name of the Vulnerable Software and Affected Versions VMware GemFire versions prior to 9.10.0 VMware GemFire versions prior to 9.9.2 VMware GemFire versions prior to 9.8.7 VMware GemFire versions prior to 9.7.6 VMware Tanzu GemFire for VMs versions prior to 1.11.1 VMware Tanzu GemFire for VMs...

CVE-2020-5396: Improper Access Control

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...

CVE-2020-5396

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed without a SecurityManager, contain a JMX service available which contains an insecure default configuration. This allows a malicious user to create...