Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Azure Site Recovery VMWare Privilege Escalation

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

VMware vRealize Operations Information Disclosure

The vulnerability of the monitoring tool for VMware vRealize Operations relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

VMware Workstation Registration Disclosure

The vulnerability of VMware Workstation hypervisor is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

VMware vRealize Operations 8.x < 8.6.4 Multiple Vulnerabilities (VMSA-2022-0022)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6.4. It is, therefore, affected by a multiple vulnerabilities: - A malicious actor with administrative network access can escalate privileges to root. CVE-2022-31672 - A low-privileged malicious actor wit...

VMware vCenter Server SSRF

The vulnerability of the software for managing virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending specially craft...

Security Bulletin: Vulnerabilities in vCenter affect IBM Cloud Pak System (CVE-2021-21980, CVE-2021-22049 )

Summary Vulnerabilities have beein found in VMware vCenter. vCenter is shipped with Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-21980 DESCRIPTION: VMware vCenter Server could allow a remote attacker to obtain sensitive information,...

VMware Workstation 16.x < 16.2.4 Information Disclosure (VMSA-2022-0023)

The version of VMware Workstation installed on the remote host is 16.x prior to 16.2.4. It is, therefore, affected by an unprotected storage of credentials vulnerability. A local attacker can exploit this leading to the disclosure of user passwords of the remote server connected through VMware...

CVE-2022-31675

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...

CVE-2022-31675

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...

CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...

CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...

CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

CVE-2022-22983

VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...