Photon OS 2.0: Go PHSA-2020-2.0-0276

An update of the go package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0276. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139865;...

Binary Vulnerability in VMware Workstation Pro for Windows (CNVD-2020-53154)

VMware Workstation Pro for Windows is a Windows-based virtual machine software product from VMware. A binary vulnerability exists in VMware Workstation Pro for Windows, which can be exploited by attackers to cause a system crash...

Support for IBM Cloud for VMware Solutions

Support Statement IBM Cloud for VMware Solutions provides full bare metal and hypervisor access and complete administrative permissions to vCenter, NSX, and any additional services. This ensures customers who transition their VMware infrastructure to IBM Cloud can expect a consistent level of...

Support for Oracle Cloud VMware Solution (OCVS)

Support Statement Oracle Cloud VMware Solution OCVS allows you to create and manage VMware-enabled software-defined data centers SDDCs in Oracle Cloud Infrastructure. Oracle Cloud VMware Solution provides self-service provisioning with full administrative permissions, including root access,...

Binary Vulnerability in VMware Workstation Pro for Windows

VMware Workstation Pro for Windows is a Windows-based virtual machine software product from VMware. A binary vulnerability exists in VMware Workstation Pro for Windows, which can be exploited by attackers to cause a system crash...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

Cross site scripting

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

CVE-2020-3975

CVE-2020-3975 describes a Stored XSS issue in VMware App Volumes for 2.x (pre-2.18.6) and 4.x (pre-2006). The root cause is inadequate input validation when creating/editing applications or storage groups, enabling a malicious actor with those permissions to inject script executed in a victim’s b...

CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

Denial of service

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

CVE-2020-3976

CVE-2020-3976 affects VMware ESXi and vCenter Server, describing a partial denial-of-service in their authentication services. The public details identify a moderate impact (CVSSv3 base score 5.3) with network access required and low attack complexity, but do not provide exploit specifics in the ...

CVE-2020-3976

VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3...

Photon OS 1.0: Linux PHSA-2020-1.0-0314

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0314. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139700...

VMware App Volumes patches address Stored Cross-Site Scripting (XSS) vulnerability (CVE-2020-3975)

3a. Advisory Details VMware App Volumes does not correctly validate user input when creating and editing applications or creating storage groups. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.5...

Photon OS 1.0: Curl PHSA-2020-1.0-0315

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0315. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139702;...

Photon OS 3.0: Curl PHSA-2020-3.0-0129

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0129. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139729;...

Photon OS 1.0: Etcd PHSA-2020-1.0-0313

An update of the etcd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139696;...