Photon OS 1.0: Networkmanager PHSA-2021-1.0-0409

An update of the NetworkManager package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0409. The text itself is copyright C VMware, Inc...

VMware Tools 11.x < 11.2.6 Privilege Escalation (VMSA-2021-0013)

The version of VMware Tools installed on the remote Windows host is 11.x prior to 11.2.6. It is, therefore, affected by a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as 'openssl.cnf' in an...

Linux Variant of REvil Ransomware Targets VMware’s ESXi, NAS Devices

UPDATE Cybercriminals behind a string of high-profile ransomware attacks, including one extorting $11 million from JBS Foods last month, have ported their malware code to the Linux operating system. The unusual move is an attempt to target VMware’s ESXi virtual machine management software and...

Photon OS 1.0: Linux PHSA-2021-1.0-0408

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0408. The text itself is copyright C VMware, Inc...

VMware Carbon Black App Control Web Console Detection

Binary data vmwarecarbonblackappcontrolwebconsoledetect.nbin...

VMware Carbon Black App Control Installed (Windows)

Binary data vmwarecarbonblackappcontrolwininstalled.nbin...

The vulnerability of the VMware Carbon Black App Control server is related to authentication errors, which allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VMware Carbon Black App Control server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability relates to the set of tools for VMware Tools, the software for managing applications and users across various VMware Virtual Machines, as well as the VMware Remote Console. This allows a malicious individual to escalate their privileges.

The vulnerability affects the set of utilities in VMware Tools, the software for managing applications and users across various VMware App Volumes, as well as the VMware Remote Console. This vulnerability stems from the absence of quotation marks in the syntax of certain elements or search paths...

VMware Carbon Black App Control Unsupported Version Detection (deprecated)

This plugin has been deprecated. For plugins which identify unsupported instances of this product, search the plugin feed for VMware Carbon Black App Control SEoL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee

Hello, today I want to experiment with a new format. I will be reading last weeks news from my @avleonovnews channel, which I found the most interesting. I do this mostly for myself, but if you like it too, then that would be great. Please subscribe to my YouTube channel and my Telegram...

VMware Spring Security 安全漏洞

VMware Spring Security is a suite of security frameworks from VMware that provide illustrative security protections for Spring-based applications. A security vulnerability exists in Spring Security that allows an attacker to send multiple requests to initiate authorization requests granted by the...

VMware vCenter Server RCE 6.5 / 6.7 / 7.0 - Remote Code Execution Exploit

Exploit Title: VMware vCenter Server RCE 6.5 / 6.7 / 7.0 - Remote Code Execution RCE Unauthenticated Exploit Author: CHackA0101 Vendor Homepage: https://kb.vmware.com/s/article/82374 Software Link: https://www.vmware.com/products/vcenter-server.html Version: This affects VMware vCenter Server 7.x...

VMware Tools 11.x < 11.3.0 DoS (VMSA-2021-0011)

The version of VMware Tools installed on the remote Windows host is 11.x, which is prior to 11.3.0. It is, therefore, affected by a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is...

Photon OS 4.0: Linux PHSA-2021-4.0-0052

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0052. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Photon OS 2.0: Linux PHSA-2021-2.0-0363

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0363. The text itself is copyright C VMware, Inc...

The vulnerability of the VMware Tools driver for the VM3DMP set of utilities on Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the VMware Tools utility driver for Windows operating systems exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Photon OS 3.0: Linux PHSA-2021-3.0-0259

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0259. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Critical VMware Carbon Black Bug Allows Auth Bypass

VMware has fixed an uber-severe bug in its Carbon Black App Control AppC management server: A server whose job is to lock down critical systems and servers so they don’t get changed willy-nilly. AppC also ensures that organizations stay in continuous compliance with regulatory mandates. This is a...

VMware patches 2 Critical Vulnerabilities in Carbon Black App Control, VMWare Tools and VMWare Remote Console

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. VMware has patched an authentication bypass vulnerabilityCVE-2021-21998 in the carbon black app control management server. Apart from this vulnerability VMware also patched a privilege escalation vulnerabilityCVE-2021-21999...

Critical Auth Bypass Bug Affects VMware Carbon Black App Control

VMware has rolled out security updates to resolve a critical flaw affecting Carbon Black App Control that could be exploited to bypass authentication and take control of vulnerable systems. The vulnerability, identified as CVE-2021-21998, is rated 9.4 out of 10 in severity by the industry-standar...