PT-2022-4341 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to potentially elevate...

PT-2022-4209 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow an attacker to...

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in vRealize Operations. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0022 and appl...

PT-2022-4208 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4732 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to gain unauthorized...

VMware Workstation 安全漏洞

VMware Workstation is a set of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation that originates from an unprotected credential store tha...

PT-2022-4199 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery VMWare to Azure emergency recovery tool, which can be exploited by a remote attacker to execute...

PT-2022-4723 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It allows a remote attacker to potentially...

PT-2022-4417 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to exploit the weakness an...

PT-2022-4728 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It allows a remote attacker to potentially...

PT-2022-4202 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4229 · Vmware · Vmware Vrealize Operations

Name of the Vulnerable Software and Affected Versions: VMware vRealize Operations affected versions not specified Description: The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0021)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain...

A week in security (August 1 – 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foley’s Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and...

VMware Workspace ONE Access Installed

Binary data vmwareworkspaceoneaccessinstalled.nbin...

A week in security (August 1 - August 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foleys Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and yo...

VMSA-2022-0023:VMware Workstation update addresses an unprotected storage of credentials vulnerability

Advisory ID: VMSA-2022-0023 CVSSv3 Range: 5.7 Issue Date:2022-08-09 Updated On: 2022-08-09 Initial Advisory CVEs: CVE-2022-22983 Synopsis: VMware Workstation update addresses an unprotected storage of credentials vulnerability CVE-2022-22983 RSS Feed Download PDF Download Text File Share this pag...

VMSA-2022-0022:VMware vRealize Operations contains multiple vulnerabilities

Advisory ID: VMSA-2022-0022 CVSSv3 Range: 5.6-7.2 Issue Date:2022-08-09 Updated On: 2022-08-09 Initial Advisory CVEs: CVE-2022-31672, CVE-2022-31673, CVE-2022-31674, CVE-2022-31675 Synopsis: VMware vRealize Operations contains multiple vulnerabilities RSS Feed Download PDF Download Text File Shar...

Metasploit Weekly Wrap-Up

Log4Shell in MobileIron Core Thanks to jbaines-r7 we have yet another Log4Shell exploit. Similar to the other Log4Shell exploit modules, the exploit works by sending a JNDI string that once received by the server will be deserialized, resulting in unauthenticated remote code execution as the tomc...

CVE-2022-31656

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate...