Photon OS 4.0: Wpa_Supplicant PHSA-2021-4.0-0014

An update of the wpasupplicant package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Cairo PHSA-2021-3.0-0226

An update of the cairo package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0226. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149048...

Photon OS 4.0: Go PHSA-2021-4.0-0013

An update of the go package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149054;...

Photon OS 4.0: Linux PHSA-2021-4.0-0013

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid149053...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware vRealize Operations vROps Manager SSRF RCE', 'Description' = %q This module exploits a pre-auth SSRF CVE-2021-21975 and post-auth file wri...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution Exploit

This Metasploit module exploits a pre-auth server-side request forgery CVE-2021-21975 and post-auth file write CVE-2021-21983 in VMware vRealize Operations Manager to leak admin creds and write/execute a JSP payload. CVE-2021-21975 affects the /casa/nodes/thumbprints endpoint, and CVE-2021-21983...

Exploit for Path Traversal in Vmware Cloud_Foundation

vsphereyeeter.sh is an automated bash script to exploit vuln...

VMware Carbon Black Delivers High-Fidelity Insight at Every Step of MITRE Engenuity ATT&CK® Evaluation

For the third year in a row, VMware Carbon Black today announced its participation in MITRE Engenuity’s third annual ATT&CK® Evaluations with VMware Carbon Black Cloud. VMware Carbon Black Cloud delivered robust telemetry coverage with correlated, high-fidelity alerts at each and every step of th...

Photon OS 4.0: Rust PHSA-2021-4.0-0012

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0012. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148910;...

Photon OS 3.0: Linux PHSA-2021-3.0-0221

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0221. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148901;...

Photon OS 3.0: Rust PHSA-2021-3.0-0223

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148908;...

Photon OS 3.0: Nettle PHSA-2021-3.0-0223

An update of the nettle package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148907;...

Photon OS 3.0: Redis PHSA-2021-3.0-0220

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148813...

Photon OS 1.0: Linux PHSA-2021-1.0-0382

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0382. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148823...

VMware NSX-T Privilege License and Access Control Issues Vulnerability

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

VMware Releases Security Update

VMware has released a security update to address a vulnerability affecting NSX-T. An attacker can exploit this vulnerability to take control of an affected system CISA encourages users and administrators to review VMSA-2021-0006 and apply the necessary update and workaround. This product is...

Ubuntu 16.04 LTS : OpenSLP vulnerability (USN-4919-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4919-1 advisory. It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash or possibly execute arbitrary code...

Photon OS 2.0: Redis PHSA-2021-2.0-0336

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0336. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148824...

Photon OS 1.0: Openvswitch PHSA-2021-1.0-0381

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Elasticsearch PHSA-2021-3.0-0219

An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0219. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...