PT-2012-3319

Name of the Vulnerable Software and Affected Versions vCenter Orchestrator versions 4.0 through 4.0 Update 3 vCenter Orchestrator versions 4.1 through 4.1 Update 1 vCenter Orchestrator versions 4.2 through 4.2 Update 0 Description The issue allows remote authenticated administrators to obtain...

CVE-2012-1513: Exposure of Sensitive Information to an Unauthorized Actor

The Web Configuration tool in VMware vCenter Orchestrator vCO 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document...

VMSA-2011-0013.2 VMware third party component updates for VMware vCenter Server, vSphere Update Manager, ESXi and ESX

The remote ESXi is missing one or more security related Updates from VMSA-2011-0013.2. Summary Updates for vCenter Server 4.1, vSphere Update Manager 4.1, vSphere Hypervisor ESXi 4.1 and ESX 4.x addresses several security issues. Relevant releases vCenter Server 4.1 without Update 2 vCenter Serve...

VMSA-2012-0005:VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

VMSA-2012-0005.4 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0005.4 VMware Security Advisory Synopsis: VMware vCenter Server...

An error message "Collecting thread has failed to initialize (Time difference between Veeam Monitor server and ESX host is too large. Make sure that NTP is enabled on ESX host and try again.) and will be stopped" in Veeam Monitor

Challenge The error "Connection problems" appears with vCenter server or ESXi host in Veeam ONE Monitor client infrastructure view. vCenter server or the ESXi host becomes grayed out: No data goes to the Veeam ONE Monitor client and into the Veeam ONE database. vCenter server or ESXi might be...

VMSA-2011-0013 : VMware third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third-party update for Service Console openssl RPM The Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues. b...

VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third party update for Service Console openssl RPMThe Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues.Colum...

VMSA-2011-0013:VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

VMSA-2011-0013.3 VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0013.3 VMware Security Advisory Synopsis: VMware third party component updates for VMware vCenter Server,...

VDDK Error 3 Troubleshooting

Challenge A Backup or Replication job fails with an error containing 'VDDK error: 3 ' This most often occurs when forcing aVMware Backup Proxy to use 'Virtual Appliance' transport mode and disabling the 'Failover to network mode' option. Cause The most common scenario is that the disks of the VM...

No data or incorrect data arrives into Operations Manager from the vCenter Server due to the vCenter Server statistics interval

Challenge No data or incorrect data arrives into Operations Manager from the vCenter Server due to the impact of vCenter Server statistics interval on the Veeam Collector operation. Cause This may happen due to various reasons, in particular, due to incorrect settings of the vCenter Server...

CVE-2011-1788

vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...

CVE-2011-0426

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...

CVE-2011-0426

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2011-0426

CVE-2011-0426 corresponds to VMware vCenter Server and VirtualCenter directory traversal vulnerability that allows remote read of arbitrary files via unspecified vectors. Affected products/versions per advisories: vCenter Server 4.0 before Update 3, vCenter Server 4.1 before Update 1, and Virtual...

CVE-2011-1788

CVE-2011-1788 is discussed in VMware advisory VMSA-2011-0008 and related Nessus plugin; it covers SOAP session ID disclosure in vCenter Server as part of multiple VMware vulnerabilities. Connected documents also describe: (1) CVE-2011-0426 (directory traversal) affecting vCenter Server, VirtualCe...

PT-2011-3369

Name of the Vulnerable Software and Affected Versions vCenter Server versions 4.0 before Update 3 vCenter Server versions 4.1 before Update 1 Description The issue allows local users to discover the SOAP session ID via unspecified vectors. Recommendations For vCenter Server versions 4.0 before...

VMSA-2011-0008 : VMware vCenter Server and vSphere Client security vulnerabilities

a. vCenter Server Directory Traversal vulnerability A directory traversal vulnerability allows an attacker to remotely retrieve files from vCenter Server without authentication. In order to exploit this vulnerability, the attacker will need to have access to the network on which the vCenter Serve...

CVE-2011-1788: Exposure of Sensitive Information to an Unauthorized Actor

vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...