The vulnerability of the UHCI controller on the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor allows a attacker to execute arbitrary code.

The vulnerability of the UHCI platform of the VMware Cloud Foundation and the VMware ESXi hypervisor lies in synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager (vIDM) administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for application lifecycle management, is related to deficiencies in the deserialization mechanism, allowing an attacker to execute arbitrary code.

The vulnerabilities of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager vIDM administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite...

The vulnerability of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager (vIDM) administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for application lifecycle management, is related to deficiencies in the deserialization mechanism, allowing an attacker to execute arbitrary code.

The vulnerabilities of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager vIDM administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite...

The vulnerability of the VMware Workspace ONE Access application management platform, the VMware Identity Manager administration console, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for managing application lifecycles is related to a flaw that allows attackers to disclose protected information.

The vulnerabilities of the VMware Workspace ONE Access application management platform, the VMware Identity Manager administration console, the VMware Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software are related to information disclosure. Exploiting thes...

The vulnerability of the VMware Workspace ONE Access application management platform, the VMware Cloud Foundation virtualization platform, the VMware vRealize Automation virtual infrastructure management tool, the vRealize Suite Lifecycle Manager application lifecycle management software, and the VMware Identity Manager (vIDM) administration console lies in insufficient checks on the HTTP request source. This allows attackers to carry out CSRF attacks.

The vulnerabilities of the application management platform VMware Workspace ONE Access, the virtualization platform VMware Cloud Foundation, the virtual infrastructure management tool VMware vRealize Automation, the application lifecycle management software vRealize Suite Lifecycle Manager, and t...

The vulnerability of the VMware Workspace ONE Access application management platform, the VMware Cloud Foundation virtualization platform, the VMware vRealize Automation virtual infrastructure management tool, the vRealize Suite Lifecycle Manager application lifecycle management software, and the VMware Identity Manager (vIDM) administration console—all of which are related to errors in the use of standard permissions—allow a perpetrator to increase their privileges.

The vulnerabilities of the VMware Workspace ONE Access application management platform, the VMware Cloud Foundation virtualization platform, the VMware vRealize Automation virtual infrastructure management tool, the vRealize Suite Lifecycle Manager application lifecycle management software, and t...

The vulnerability of the VMware Identity Manager administration console, the Workspace ONE Access application management platform, the Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software for application lifecycle management, arises from improper code generation. This allows an attacker to execute arbitrary code.

The vulnerabilities of VMware Identity Manager administration consoles, Workspace ONE Access application management platform, Cloud Foundation virtualization platform, and the vRealize Suite Lifecycle Manager software are related to improper code generation. Exploiting these vulnerabilities allow...

PT-2022-2142 · Vmware · Vmware Vrealize Automation +4

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access versions affected versions not specified VMware Cloud Foundation versions affected versions not specified VMware vRealize Automation versions affected versions not specified vRealize Suite Lifecycle Manager version...

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure...

The vulnerability of the SDDC controller in the VMware Cloud Foundation virtualization platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SDDC controller of the VMware Cloud Foundation virtualization platform is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products

VMware on Tuesday patched several high-severity vulnerabilities impacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could be exploited to execute arbitrary code and cause a denial-of-service DoS condition. As of writing, there's no evidence that any of the...

Vmware Cloud Foundation 资源管理错误漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. A resource management error vulnerability exists in Vmware Cloud Foundation, whi...

VMWare Cloud Foundation (ESXi) 访问控制错误漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. An access control error vulnerability exists in VMWare Cloud Foundation ESXi tha...

VMware ESXi 竞争条件问题漏洞

Vmware VMware ESXi is a server virtualization platform from Vmware that can be installed directly on physical servers. A Competing Conditions Issue vulnerability exists in VMware ESXi, which stems from a double fetch vulnerability in the product's UHCI USB controller. A remote user with...

Vmware Cloud Foundation 输入验证错误漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. An input validation error vulnerability exists in Vmware Cloud Foundation, which...

CVE-2022-22939

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...

Information disclosure

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...

CVE-2022-22939

CVE-2022-22939 affects VMware Cloud Foundation (SDDC Manager). The root cause is information disclosure from credentials being logged in plaintext across multiple log files, enabling a malicious actor with root access to view credentials. Affected releases include VMware Cloud Foundation 3.x and ...

CVE-2022-22939

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...

Vmware VMware Cloud Foundation 日志信息泄露漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. A security vulnerability exists in VMware Cloud Foundation that originates from...