Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

VMSA-2022-0024:VMware Tools update addresses a local privilege escalation vulnerability

Advisory ID: VMSA-2022-0024.1 CVSSv3 Range: 7.0 Issue Date:2022-08-23 Updated On: 2022-09-02 CVEs: CVE-2022-31676 Synopsis: VMware Tools update addresses a local privilege escalation vulnerability CVE-2022-31676 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacted...

VulnCheck KEV: CVE-2022-22963

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources...

CVE-2022-21793

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

CVE-2022-21793

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

Design/Logic Flaw

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

CVE-2022-21793

CVE-2022-21793 is a vulnerability in Intel® Ethernet VMware drivers. The issue is caused by insufficient control flow management in the Intel® Ethernet 500 Series Controller drivers for VMware before version 1.11.4.0 and in the Intel® Ethernet 700 Series Controller drivers for VMware before versi...

CVE-2022-21793

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

PT-2022-15134 · Vmware +1 · Vmware +2

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 500 Series Controller drivers for VMWare versions prior to 1.11.4.0 IntelR Ethernet 700 Series Controller drivers for VMWare versions prior to 2.1.5.0 Description: The issue is related to insufficient control flow management i...

CVE-2022-21793: Undefined Security Weakness

Insufficient control flow management in the IntelR Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the IntelR Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via loc...

VMware vRealize Orchestrator Information Disclosure

The vulnerability of the VMware vRealize Orchestrator platform for automating processes is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

VMware Tools XXE

The vulnerability of the VMware Tools utility set for Windows operating systems is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow attackers to execute XXE attacks...

Disaster Recovery Tool Azure Site Recovery VMWare Code Execution

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

VMware vRealize Operations Monitoring Tool Unauthorized Access

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

VMware vRealize Operations Authentication Privilege Escalation

The vulnerability of the monitoring tool for VMware vRealize Operations is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create a user with administrative privileges...