PT-2016-6371

Name of the Vulnerable Software and Affected Versions VMware Identity Manager versions prior to 2.7 vRealize Automation versions 7.0.x through 7.0.x before 7.1 Description The issue allows local users to obtain root access via unspecified vectors. Recommendations For VMware Identity Manager...

PT-2016-6368

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.6.0 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For versions 2.x through 3.x before 3.6.0, update to version 3.6.0 or...

CVE-2016-5336: Undefined Security Weakness

VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2016-6372

Name of the Vulnerable Software and Affected Versions VMware vRealize Automation versions 7.0.x Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. Recommendations For versions 7.0.x, update to version 7.1 or later to resolve the issue...

CVE-2016-5335: Undefined Security Weakness

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...

VMware vRealize Automation 7.0.x < 7.1 Multiple Vulnerabilities (VMSA-2016-0013)

The VMware vRealize Automation application running on the remote host is version 7.0.x prior to 7.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to elevate privileges from a low-privileged account to root access...

VMware Identity Manager vRealize Automation Patches

VMware this week patched a single vulnerability that pops up in two of its products that allows an attacker to elevate privileges on a compromised machine. The virtualization company patched CVE-2016-5335 in its Identity Manager and vRealize Automation software. “Exploitation of this issue may le...

VMware vRealize Automation Remote Command Execution Vulnerability

VMware vRealize Automation is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A remote code...

VMware Identity Manager and vRealize Automation Local Elevation of Privilege Vulnerability

VMware Identity Manager and vRealize Automation are both products of VMware, Inc. The former is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and single sign-on SSO for SaaS, web, cloud, and native mobile applications, while the latter is a...

VMware vRealize Automation updates address multiple security issues (VMSA-2016-0013)

VMware vRealize Automation updates address multiple security issues. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMWare Releases Security Updates

VMWare has released security updates to address vulnerabilities in VMware Identity Manager and vRealize Automation. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review VMware Security...

VMSA-2016-0013:VMware Identity Manager and vRealize Automation updates address multiple security issues

VMSA-2016-0013 VMware Identity Manager and vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Identity Manager and vRealiz...

VMware vRealize Log Insight 2.x / 3.x < 3.6.0 Directory Traversal File Disclosure (VMSA-2016-0011)

The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.6.0. It is, therefore, affected by a directory traversal vulnerability due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to disclose arbitrary...

VMware vRealize Log Insight Directory Traversal Vulnerability

VMware vRealize Log Insight is a suite of log management and analysis tools from VMware. The tool provides real-time log management capabilities for VMware virtual machines by enabling intelligent machine learning-based grouping, searching and troubleshooting across physical, virtual and cloud...

VMware vRealize Log Insight Directory Traversal Vulnerability (VMSA-2016-0011)

VMware vRealize Log Insight is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware vRealize Orchestrator Detection (HTTP)

HTTP based detection of VMware vRealize Orchestrator. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMware vRealize Operations Manager Detection (HTTP)

HTTP based detection of VMware vRealize Operations Manager. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

VMware vRealize Automation Detection (HTTP)

HTTP based detection of VMware vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMware vRealize Log Insight 2.x / 3.x < 3.3.2 Multiple Vulnerabilities (VMSA-2016-0008)

The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.3.2. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An...

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

VMSA-2016-0011 vRealize Log Insight update addresses directory traversal vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0011 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: vRealize Log Insight update addresses directory...