EUVD-2020-25273

Malware in sbrugna...

VMware Carbon Black Cloud Security Vulnerability

VMware Carbon Black Cloud is a Sass platform from VMware, Inc. that provides security checking defense capabilities for cloud endpoints. A security vulnerability exists in the Vmware Carbon Black Cloud MacoS Sensor that stems from the macOS Sensor's installer handling certain files in an insecure...

CVE-2020-4008: Undefined Security Weakness

The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...