EUVD-2020-25273

Malware in sbrugna...

CVE-2020-4008: Undefined Security Weakness

The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...

VMware Carbon Black Cloud Security Vulnerability

VMware Carbon Black Cloud is a Sass platform from VMware, Inc. that provides security checking defense capabilities for cloud endpoints. A security vulnerability exists in the Vmware Carbon Black Cloud MacoS Sensor that stems from the macOS Sensor's installer handling certain files in an insecure...

PT-2020-5283

Name of the Vulnerable Software and Affected Versions VMware Carbon Black Cloud for MacOS versions prior to 3.5.1 Description The issue is related to the handling of certain files by the installer of the macOS Sensor for VMware Carbon Black Cloud in an insecure way. A malicious actor with local...