VMware vRealize Automation Session Hijacking Vulnerability

VMware vRealize Automation vRA is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A session...

VMware Releases Security Updates

VMware has released security updates to address a vulnerability in vRealize Automation. An attacker could exploit this vulnerability to take control of an affected system. NCCIC encourages users and administrators to review the VMware Security Advisory VMSA-2018-0009 and apply the necessary...

VMware vRealize Automation Cross-Site Scripting Vulnerability (CNVD-2018-08694)

VMware vRealize Automation vRA is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A cross-sit...

VMSA-2018-0009:vRealize Automation updates address multiple security issues.

VMSA-2018-0009 vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0009 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: vRealize Automation updates address multiple security issues...

The vulnerability of the vSphere Integrated Containers software platform and the vRealize Automation automation tool lies in the ability to execute arbitrary code due to a memory corruption issue. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the vSphere Integrated Containers software platform and the vRealize Automation automation tool exists due to the restoration of a questionable data structure in memory. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending...

VMware vRealize Operations Published Applications (V4PA) Desktop Agent Detection (Windows SMB Login)

SMB login-based detection of VMware vRealize Operations Published Applications V4PA Desktop Agent. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

VMware vRealize Automation Deserialization Vulnerability (VMSA-2018-0006)

The VMware vRealize Automation application running on the remote host is version 7.2 or 7.3 and is missing security patches indicated in the vendor advisory. It is, therefore, affected by a deserialization vulnerability. TRUSTED...

CVE-2017-4947

VMware vRealize Automation 7.3 and 7.2 and vSphere Integrated Containers 1.x before 1.3 contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance...

CVE-2017-4947

VMware vRealize Automation 7.3 and 7.2 and vSphere Integrated Containers 1.x before 1.3 contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance...

Deserialization of untrusted data

VMware vRealize Automation 7.3 and 7.2 and vSphere Integrated Containers 1.x before 1.3 contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance...

CVE-2017-4947

VMware vRealize Automation 7.3 and 7.2 and vSphere Integrated Containers 1.x before 1.3 contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance...

CVE-2017-4947

CVE-2017-4947 describes a deserialization vulnerability via Xenon in VMware vRealize Automation (vRA) 7.2/7.3 and VIC 1.x before 1.3, allowing remote code execution on the appliance. Connected documents confirm the affected products/versions and cite mitigation via patches: vRA 7.2/7.3 require up...

VMware vRealize Automation and vSphere Integrated Containers Remote Code Execution Vulnerability

VMware vRealize Automation vRA and vSphere Integrated Containers VIC are both products from VMware. vRealize Automation vRA is a suite of cloud automation software. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructure...

PT-2018-1080 · Vmware · Vsphere Integrated Containers +2

Name of the Vulnerable Software and Affected Versions: VMware vRealize Automation versions 7.2 through 7.3 vSphere Integrated Containers versions 1.x before 1.3 Description: The issue is caused by a deserialization vulnerability via Xenon, which may allow remote attackers to execute arbitrary cod...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vRealize Automation, vSphere Integrated Containers, and AirWatch Console. An attacker could exploit these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the VMwar...

VMSA-2018-0006:vRealize Automation, vSphere Integrated Containers, and AirWatch Console updates address multiple security vulnerabilities

VMSA-2018-0006 vRealize Automation, vSphere Integrated Containers, and AirWatch Console updates address multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0006 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis:...

VMware vRealize Operations for Published Applications Desktop Agent Installed (Windows)

Binary data vmwarevrealizeoperationspublishedapplicationsdesktopagentinstalled.nbin...

VMware vRealize Operations for Horizon Desktop Agent Installed (Windows)

Binary data vmwarevrealizeoperationshorizondesktopagentinstalled.nbin...

VMware vRealize Operations for Horizon Desktop Agent 6.x < 6.5.1 Privilege Escalation Vulnerability (VMSA-2018-0003)

The remote VVMware vRealize Operations for Horizon Desktop Agent V4H 6.x host is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105789; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/08"; scriptcveid"CVE-2017-4946";...

VMware vRealize Operations for Published Applications Desktop Agent 6.x < 6.5.1 Privilege Escalation Vulnerability (VMSA-2018-0003)

The remote VVMware vRealize Operations for Publsihed Applications Desktop Agent V4PA 6.x host is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105790; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/08";...