EUVD-2020-25240

Malware in sbrugna...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

The vulnerability relates to the set of tools for VMware Tools, the software for managing applications and users across various VMware Virtual Machines, as well as the VMware Remote Console. This allows a malicious individual to escalate their privileges.

The vulnerability affects the set of utilities in VMware Tools, the software for managing applications and users across various VMware App Volumes, as well as the VMware Remote Console. This vulnerability stems from the absence of quotation marks in the syntax of certain elements or search paths...

Critical VMware Carbon Black Bug Allows Auth Bypass

VMware has fixed an uber-severe bug in its Carbon Black App Control AppC management server: A server whose job is to lock down critical systems and servers so they don’t get changed willy-nilly. AppC also ensures that organizations stay in continuous compliance with regulatory mandates. This is a...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

CVE-2021-21999

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in the VMware Carbon Black App Control management server as well as VMware Tools for Windows, VMware Remote Console for Windows, and VMware App Volumes. An attacker could exploit these vulnerabilities to take control of an affected...

CVE-2021-21999: Uncontrolled Search Path Element

VMware Tools for Windows 11.x.y prior to 11.2.6, VMware Remote Console for Windows 12.x prior to 12.0.1 , VMware App Volumes 2.x prior to 2.18.10 and 4 prior to 2103 contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by...

多款VMware产品代码问题漏洞

VMware Tools for Windows is a set of Windows-based enhancements for VMWare virtual machines, VMware Remote Console is a remote console application, VMware Tools is a set of enhancements for VMWare virtual machines, Microsoft Windows is a product of Microsoft Corporation. VMware Tools for Windows ...

PT-2021-3448

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 11.x.y prior to 11.2.6 VMware Remote Console for Windows versions 12.x prior to 12.0.1 VMware App Volumes versions 2.x prior to 2.18.10 VMware App Volumes version 4 prior to 2103 Description The issue is relat...

The vulnerability of the application and user management software for various VMware App Volumes virtual environments lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the application and user management software for various VMware App Volumes virtual environments is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

VMware App Volumes 2.x < 2.18.6 / 4.x < 4.1.0.57 (2006) XSS

The version of VMWare App Volumes installed on the remote host is 2.x prior to 2.18.6, or 4.x prior to 4.1.0.57 2006. It is, therefore, affected by a cross-site scripting vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject...

VMware App Volumes Manager Installed (Windows)

Binary data vmwareappvolmgrinstalled.nbin...

VMware App Volumes Agent Installed (Windows)

Binary data vmwareappvolagentinstalled.nbin...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

CVE-2020-3975

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...

Cross site scripting

VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim'...