PT-2022-4723 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It allows a remote attacker to potentially...

PT-2022-4334 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restriction in the Azure Site Recovery VMWare to Azure emergency recovery tool. It allows a remote attacker to potentially elevate...

PT-2022-4725 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery tool for VMWare to Azure, allowing a remote attacker to execute arbitrary code. Recommendations:...

PT-2022-4229

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...

PT-2022-4699 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to elevate their...

PT-2022-4216 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMWare to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4417 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to exploit the weakness an...

PT-2022-4219

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to an information disclosure vulnerability in the monitoring tool for virtual infrastructure. It allows a remote attacker to disclose protected...

PT-2022-4210 · Microsoft · Azure Site Recovery +2

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery VMWare to Azure affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restriction in the emergency recovery tool for Azure Site...

PT-2022-4214 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

Intel® Ethernet VMware Drivers Advisory

Summary: A potential security vulnerability in some Intel® Ethernet VMWare drivers may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21793 Description: Insufficient control flow management in the Intel...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0021)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain...

KLA15720 SB vulnerability in VMware Workstation

Security bypass vulnerability was found in VMware Workstation. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories VMSA-2022-0023 Exploitation Related products VMware-Workstation CVE list CVE-2022-22983 high Solution Update to the latest version...

PT-2022-4209 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow an attacker to...

PT-2022-4701 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow a remote...

A week in security (August 1 – 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foley’s Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and...

VMware Workspace ONE Access Installed

Binary data vmwareworkspaceoneaccessinstalled.nbin...

A week in security (August 1 - August 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foleys Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and yo...

VMSA-2022-0023:VMware Workstation update addresses an unprotected storage of credentials vulnerability

Advisory ID: VMSA-2022-0023 CVSSv3 Range: 5.7 Issue Date:2022-08-09 Updated On: 2022-08-09 Initial Advisory CVEs: CVE-2022-22983 Synopsis: VMware Workstation update addresses an unprotected storage of credentials vulnerability CVE-2022-22983 RSS Feed Download PDF Download Text File Share this pag...

VMSA-2022-0022:VMware vRealize Operations contains multiple vulnerabilities

Advisory ID: VMSA-2022-0022 CVSSv3 Range: 5.6-7.2 Issue Date:2022-08-09 Updated On: 2022-08-09 Initial Advisory CVEs: CVE-2022-31672, CVE-2022-31673, CVE-2022-31674, CVE-2022-31675 Synopsis: VMware vRealize Operations contains multiple vulnerabilities RSS Feed Download PDF Download Text File Shar...