Photon OS 3.0: Dnsmasq PHSA-2021-3.0-0186

An update of the dnsmasq package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0186. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145414;...

Photon OS 3.0: Atftp PHSA-2021-3.0-0186

An update of the atftp package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0186. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145415;...

VMware vCenter REST API Data Collection

Binary data vmwarevcenterrestcollect.nbin...

Photon OS 1.0: Nodejs10 PHSA-2021-1.0-0355

An update of the nodejs10 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0355. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ESXi 7.0 DoS (VMSA-2020-0029)

According to its self-reported version number, the remote VMware ESXi host is version 7.0. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx...

CVE-2020-8581

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled...

CVE-2020-8581

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled...

Code injection

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled...

CVE-2020-8581

NetApp Clustered Data ONTAP vulnerability CVE-2020-8581 affects Clustered Data ONTAP versions prior to 9.3P20 and 9.5. An authenticated but unauthorized attacker can overwrite arbitrary data when VMware vStorage support is enabled. No remediation/patch version is stated in the provided materials;...

CVE-2020-8581

Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage support is enabled...

VMware Carbon Black Cloud™ Awarded Cyber Catalyst Designation

VMware Carbon Black Cloud has been awarded a Cyber CatalystSM designation for its cloud native endpoint and workload protection platforms, which helps more than 20,000 organizations worldwide detect and stop emerging attacks. The designation is part of the annual Cyber Catalyst by Marsh℠ program,...

Photon OS 1.0: Glibc PHSA-2021-1.0-0353

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0353. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144896...

The vulnerability of the VMware Carbon Black Cloud for MacOS installer relates to memory object processing errors, which allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the VMware Carbon Black Cloud for MacOS installer is related to errors in memory object processing. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation, related to the manipulation of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerabilities of VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation are related to the handling of the zero pointer. Exploiting these vulnerabilities can allow attackers to trigger service failures...

Photon OS 3.0: Linux PHSA-2021-3.0-0182

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0182. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144902;...

Photon OS 2.0: Linux PHSA-2021-2.0-0310

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0310. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144898...

VMware Workstation 16 Pro suffers from dll hijacking vulnerability

VMware Workstation Chinese name "威睿工作站" is a desktop virtual computer software. A dll hijacking vulnerability exists in VMware Workstation 16 Pro. An attacker can exploit this vulnerability to execute malicious code...

VMware Fusion 11.x < 11.5.7 DoS (VMSA-2020-0029)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.7. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual...

VMware Workstation 15.x < 15.5.7 DoS (VMSA-2020-0029)

The version of VMware Workstation installed on the remote host is 15.x prior to 15.5.7. It is, therefore, affected by a DoS vulnerability due to improper input validation in GuestInfo. A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine's vmx...

MTN Group: 2x Remote file inclusion within your VMware Instances

Summary: 2x Remote file inclusion within your VMware Instances Hosts: nmc.vc.mtn.co.ug h28a.n1.ips.mtn.co.ug Steps To Reproduce: Navigate to the URLs given below, /etc/passwd will be displayed. https://nmc.vc.mtn.co.ug/eam/vib?id=/etc/passwd https://h28a.n1.ips.mtn.co.ug/eam/vib?id=/etc/passwd...