VMware Patches Pesky XXE Bug in Flex BlazeDS

VMware has patched an information disclosure vulnerability affecting a number of its products that use Flex BlazeDS. The original vulnerability was discovered and disclosed in August by Matthias Kaiser of Code White GmbH. Researchers there found a XML External Entity flaw in Apache Flex BlazeDS...

VMware Releases Security Updates

VMware has released security updates to address a vulnerability in vCenter, vCloud Director, and Horizon View. Exploitation of this vulnerability may allow an attacker to obtain sensitive information. Users and administrators are encouraged to review VMware Security Advisory VMSA-2015-0008 and...

Release Notes for Veeam Backup & Replication 8.0 Update 2b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 2b Cause Please confirm you are running version 8.0.0.807, 8.0.0.817, 8.0.0.831, 8.0.0.917, 8.0.0.201...

KLA10530 JRE update for multiple VMware products

Multiple VMware products were updated to address vulnerabilities in Oracle Java. For details look at KLA10447. Original advisories VMSA advisory KLA10447 Exploitation Public exploits exist for this vulnerability. Related products VMware-unclassified-products CVE list CVE-2014-6593 warning Solutio...

CVE-2014-8373

CVE-2014-8373 affects VMware vCloud Automation Center (vCAC) 6.0.1–6.1.1 where the VMRC Connect (by) Using VMRC function enables an authenticated vCAC user to escalate privileges to administrator on vCenter Server. The vulnerability is tied to the vCAC VMRC functionality and could allow remote pr...

VMware vCloud Automation Center privilege escalation

Privilege escalation via "Connect by Using VMRC" functionality...

NEW VMSA-2014-0013 - VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2014-0013 Synopsis: VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability Issu...

VMSA-2014-0013:VMware vCloud Automation Center product updates address a CRITICAL remote privilege escalation vulnerability

VMSA-2014-0013 VMware vCloud Automation Center product updates address a critical remote privilege escalation vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2014-0013 VMware Security Advisory Synopsis: VMware vCloud Automation Center product updates address a...

Cisco Nexus 1000V Cross-Site Scripting Vulnerability

A vulnerability in the VMware vCloud Director of the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of a user-supplied value. An attacker could exploit this...

Cross site scripting

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

CVE-2014-3367

The CVE-2014-3367 entry affects Cisco Nexus 1000V InterCloud’s vCloud Director component. The root cause is insufficient input validation that allows an attacker to craft a link directing an authenticated user to a malicious site, enabling a reflected XSS attack. Impact described: remote attacker...

CVE-2014-3367

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

Input validation

VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security vCNS 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors...

CVE-2014-3796

CVE-2014-3796 concerns an input-validation vulnerability in VMware NSX and vCNS that could disclose sensitive information. Affected versions: NSX Edge 6.0.x prior to 6.0.6; vCNS Edge 5.5 prior to 5.5.3; vCNS Edge 5.1 prior to 5.1.4.2. Root cause is improper input validation, enabling information ...

CVE-2014-3796

VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security vCNS 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors...

vCloud jobs are not shown in SCOM views of Backup jobs

Challenge In Backup Job views under SCOM Monitoring, all backup jobs are discovered by Veeam Management Pack for Veeam Backup except for vCloud vCD backup jobs. Cause The behavior is caused by a known issue and fixed in Veeam Management Pack v7. Solution Upgrade to most recent version. More...

VMware多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 VMware多个产品存在安全漏洞。 VMware多个产品所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Nicira Network Virtualization Platform NVP 3.x VMware ESXi 5.x VMware NSX 4.x VMware NSX 6.x VMware Fusion 6.x Vmware Horizon Mirage 4.x VMware Horizo...

VMware vCloud Director 5.1.x < 5.1.3 Logout XSRF (VMSA-2014-0001)

The version of VMware vCloud Director installed on the remote host is 5.1.x prior to 5.1.3. It is, therefore, affected by a cross-site request forgery XSRF vulnerability due to an error in HTTP session management. A remote attacker can exploit this, by convincing a user to follow specially crafte...

VMSA-2014-0001 VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues

VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001.nasl 6750 2017-07-18 09:56:47Z teissa $ VMSA-2014-0001: VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security...

VMware ESXi/ESX address several security issues (VMSA-2014-0001)

VMware ESXi and ESX address several security issues. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...