CVE-2021-21982

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...

Vmware Carbon Black Cloud Authentication Bypass Vulnerability

Vmware Carbon Black Cloud is a Sass platform from Vmware USA that provides security checking and defense capabilities for cloud endpoints. VMware Carbon Black Cloud Workload 1.0.1 and prior versions have an authentication bypass vulnerability that could allow a user with network access to the...

CVE-2021-21982

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...

PT-2021-2560

Name of the Vulnerable Software and Affected Versions: VMware Carbon Black Cloud Workload appliance versions 1.0.0 through 1.0.1 Description: The issue is related to an authentication bypass vulnerability in the administrative interface of the VMware Carbon Black Cloud Workload appliance. This...

CVE-2021-21982: Improper Authentication

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...

VMware Carbon Black Cloud™ Awarded Cyber Catalyst Designation

VMware Carbon Black Cloud has been awarded a Cyber CatalystSM designation for its cloud native endpoint and workload protection platforms, which helps more than 20,000 organizations worldwide detect and stop emerging attacks. The designation is part of the annual Cyber Catalyst by Marsh℠ program,...

The vulnerability of the VMware Carbon Black Cloud for MacOS installer relates to memory object processing errors, which allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the VMware Carbon Black Cloud for MacOS installer is related to errors in memory object processing. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

CVE-2020-4008

The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...

CVE-2020-4008

The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...

CVE-2020-4008: Undefined Security Weakness

The installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which a macOS sensor is going to be installed, may overwrite a limited number of files with output from the sensor...

PT-2020-5283

Name of the Vulnerable Software and Affected Versions VMware Carbon Black Cloud for MacOS versions prior to 3.5.1 Description The issue is related to the handling of certain files by the installer of the macOS Sensor for VMware Carbon Black Cloud in an insecure way. A malicious actor with local...

VMworld 2020: Delivering Intrinsic Security to the World’s Digital Infrastructure

A year ago, we bet big, with a vision to truly disrupt the security industry — and ultimately help more customers stay safe from cyber attacks. The VMware acquisition of Carbon Black created a massive opportunity to leverage infrastructure and control points in new ways to make security intrinsic...

Introducing VMware Carbon Black Cloud Workload™

If you know Carbon Black, you know that we helped invent Endpoint Detection and Response EDR and pioneered the field of next-generation anti-virus NGAV and malware protection. If you know VMware, you know we helped invent virtualization and have championed moving core business servers and service...

Top Three Demos at VMworld 2020: Security, Threat Hunting, and Beyond

VMworld 2020 Sept. 29- Oct. 1 is fast approaching. This year, and for the first time ever, VMworld will showcase a new intrinsic security track featuring 50+ sessions on the future of workspace and workload security. Attendees will have the opportunity to participate in hands-on workshops, hunt f...

Top Three Things I’m Looking Forward to at VMworld 2020

VMworld 2020 September 29 to October 1 is right around the corner. This year’s event is entirely virtual and offers a unique way for all attendees to engage with the compelling agenda. I’m excited to attend VMworld 2020 also as one of the VMware Carbon Black speakers. For 48 hours beginning in...

VMware Carbon Black and Dell Extend Endpoint Security Below the OS

As endpoint security continues to evolve and thwart legacy attack techniques, cyber criminals are always trying to stay one step ahead to avoid detection and gain a persistent foothold in their targets’ infrastructure. Some sophisticated attackers are gaining traction through the malicious...

Forrester Study: VMware Carbon Black Cloud Provides 379% ROI

A newly published Forrester Consulting Total Economic Impact TEI study shows that organizations who replace their legacy endpoint security products with the VMware Carbon Black Cloud experience a 379% return on investment within three years. The commissioned study conducted on behalf of VMware al...

Bringing Intrinsic Security to Containers: VMware Acquires Octarine

UPDATE: On May 27, 2020 VMware officially closed its acquisition of Octarine. The blog post below has been amended to reflect that announcement. Today is a very exciting day for VMware and for our customers as we announce our acquisition of Octarine, whose innovative security platform for...

Forrester Study: VMware Carbon Black Cloud Provides 379% ROI

A newly published Forrester Consulting Total Economic Impact™ TEI study shows that organizations who replace their legacy endpoint security products with the VMware Carbon Black Cloud experience a 379% return on investment within three years. The commissioned study conducted on behalf of VMware...