VMware Workspace ONE Access HTTP Detection

Binary data vmwareworkspaceoneaccesswebdetect.nbin...

VMware Enables Zero Trust Through Intrinsic Security

For decades, the central philosophy behind security has been to treat the network like a castle: Build the walls higher, make the moat deeper and wider. But the onset of the primarily telework environment within the federal government has moved much of the activity outside the network perimeter, ...

NSA Warns: Patched VMware Bug Under Active Attack

Active attacks against a flaw in VMware’s Workspace One Access continue, three days after the vendor patched the vulnerability and urged customers to fix the bug classified as a zero-day at the time. Now the U.S. National Security Agency NSA has escalated concerns and on Monday warned that foreig...

The NSA Warns That Russia Is Attacking Remote Work Platforms

A vulnerability in VMWare has prompted a warning that companies—and government agencies—need to patch as soon as possible...

NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006

The National Security Agency NSA has released a Cybersecurity Advisory on Russian state-sponsored actors exploiting CVE-2020-4006, a command-injection vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. The actors were found exploiting...

Photon OS 2.0: Linux PHSA-2020-2.0-0303

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0303. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143488...

Photon OS 2.0: Glibc PHSA-2020-2.0-0303

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0303. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid143487...

VMware Rolls a Fix for Formerly Critical Zero-Day Bug

VMware has patched a zero-day bug that was disclosed in late November – an escalation-of-privileges flaw that impacts Workspace One and other platforms, for both Windows and Linux operating systems. VMware has also revised the CVSS severity rating for the bug to “important,” down from critical. T...

VMware Carbon Black Recognized as “Tech Exit of the Year” at New England Venture Capital Association’s 2020 NEVY Awards

This week, the New England Venture Capital Association named VMware Carbon Black winner of “Tech Exit of the Year” at the eighth annual NEVY Awards. The NEVY Awards recognize the top innovators, investors and companies in the region, and we couldn’t be more thrilled to receive the accolade that...

VMware Releases Security Updates to Address CVE-2020-4006

VMware has released security updates to address a vulnerability—CVE-2020-4006—in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructur...

Photon OS 2.0: Containerd PHSA-2020-2.0-0301

An update of the containerd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0301. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VulnCheck KEV: CVE-2020-4006

VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute...

Photon OS 3.0: Containerd PHSA-2020-3.0-0168

An update of the containerd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0168. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Horizon View Client < 5.5.0 Information Disclosure (VMSA-2020-0024)

The version of VMware Horizon Client for Windows installed on the remote host is less than 5.5.0. It is, therefore, affected by an information disclosure vulnerability due to incorrect validation of user input. A malicious attacker with local privileges on the machine where Horizon Client for...

The vulnerability of the XHCI interface of USB controllers in VMware ESXi, VMware Workstation, VMware Fusion, and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.

The vulnerability of the XHCI Extensible Host Controller Interface interface of USB controllers in VMware ESXi, VMware Workstation, VMware Fusion, and VMware Cloud Foundation virtualization platforms is related to the use of memory after release. Exploiting this vulnerability can allow an attacke...

The vulnerability of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.

The vulnerability of the VMware ESXi hypervisor and the VMware Cloud Foundation virtualization platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, and administration consoles like VMware Identity Manager and VMware Workspace One Access, arises due to insufficient validation of arguments passed to commands. This allows attackers to execute arbitrary commands.

The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, as well as the VMware Identity Manager administration consoles and VMware Workspace One Access application management platform, is related to insufficient validation of...

VMware ESXi SLP Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of SLP...

CVE-2020-4003

VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to...

Sql injection

VMware SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 was found to be vulnerable to SQL-injection attacks allowing for potential information disclosure. An authenticated SD-WAN Orchestrator user may inject code into SQL queries which may lead to...