155 matches found
CloudBees Jenkins VMware vRealize Automation Plugin Trust Management Issue Vulnerability
CloudBees Jenkins Hudson Labs is a set of U.S. CloudBees company based on Java development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed execution of the task . VMware vRealize Automation Plugin is us...
CVE-2019-1003068
Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003068
Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-1003068
Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
VMware vRealize Operations Manager 6.6.x < 6.6.1.11286876 / 6.7.x < 6.7.0.11286837 / 7.x < 7.0.0.11287810 Local Privilege Escalation Vulnerability (VMSA-2018-0031)
The version of VMware vRealize Operations vROps Manager running on the remote web server is 6.6.x prior to 6.6.1.11286876, 6.7.x prior to 6.7.0.11286837, or 7.x prior to 7.0.0.11287810. It is, therefore, affected by a privilege escalation vulnerability due to improper permissions of support...
VMware vRealize Automation 7.0.x / 7.1.x / 7.2.x / 7.3.x Session IDs Handling Vulnerability (VMSA-2018-0009)
The version of VMware vRealize Automation installed on the remote host is 7.0.x, 7.1.x, 7.2.x, or 7.3.x. It is, therefore, affected by a vulnerability in handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session. C Tenable Network Security, Inc...
VMware vRealize Automation 7.0.x / 7.1.x / 7.2.x / 7.3.x < 7.3.1 DOM-based XSS Vulnerability (VMSA-2018-0009)
The version of VMware vRealize Automation installed on the remote host is 7.0.x, 7.1.x, 7.2.x, or 7.3.x 7.3.1. It is, therefore, affected by vulnerability that may allow for a DOM-based cross-site scripting XSS attack. Exploitation of this issue may lead to the compromise of the vRA user's...
Authorization
VMware vRealize Log Insight 4.7.x before 4.7.1 and 4.6.x before 4.6.2 contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which the...
CVE-2018-6980
VMware vRealize Log Insight 4.7.x before 4.7.1 and 4.6.x before 4.6.2 contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which the...
VMware vRealize Automation 6.x / 7.x Information Disclosure Vulnerability (VMSA-2018-0021
The version of VMware vRealize Automation installed on the remote host is 6.x or 7.x. It is, therefore, affected by an information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112209; scriptversion"1.5";...
Cross site scripting
VMware vRealize Automation vRA prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting XSS attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation...
VMware vRealize Automation Deserialization Vulnerability (VMSA-2018-0006)
The VMware vRealize Automation application running on the remote host is version 7.2 or 7.3 and is missing security patches indicated in the vendor advisory. It is, therefore, affected by a deserialization vulnerability. TRUSTED...
CVE-2017-4947
VMware vRealize Automation 7.3 and 7.2 and vSphere Integrated Containers 1.x before 1.3 contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance...
VMware vRealize Operations for Horizon Desktop Agent Installed (Windows)
Binary data vmwarevrealizeoperationshorizondesktopagentinstalled.nbin...
VMware vRealize Operations for Published Applications Desktop Agent Installed (Windows)
Binary data vmwarevrealizeoperationspublishedapplicationsdesktopagentinstalled.nbin...
VMware vRealize Operations Apache Struts2 RCE Vulnerability (VMSA-2017-0004)
VMware vRealize Operations is prone to a remote code execution RCE vulnerability in Apache Struts2. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2016-7462
The Suite REST API in VMware vRealize Operations aka vROps 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization...
VMware vRealize Operating Platform Remote Code Execution Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote code execution vulnerability exists in the VMware vRealize Operations platform. An attacker could exploit the vulnerability to execute arbitrary code in the...
VMware vRealize Operations Remote Elevation of Privilege Vulnerability
VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...