Microsoft Mitigates Azure Site Recovery Vulnerabilities

Summary Summary Microsoft recently mitigated a set of vulnerabilities in Azure Site Recovery ASR and released fixes today, July 12, as part of our regular Update Tuesday cycle. These vulnerabilities affect all ASR on-premises customers using a VMware/Physical to Azure scenario and are fixed in th...

PT-2022-3754 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in Azure Site Recovery, specifically in the VMWare to Azure component. This can be exploited by a remote attacker to execut...

PT-2022-3797 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. This could allow a remote attacker to disclose...

PT-2022-3748 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restriction in the Azure Site Recovery emergency recovery tool for VMWare to Azure, which could allow a remote attacker to disclose...

PT-2022-3850 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It may allow a remote attacker to disclose...

PT-2022-3752 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restriction in the emergency recovery tool for Azure Site Recovery VMWare to Azure, which may allow an attacker to bypass security...

PT-2022-3919 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure feature. This can be exploited by a remote attacker to elevate...

PT-2022-4137

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.8.2 Description The issue is related to a stored cross-site scripting vulnerability due to improper input sanitization in alerts, which can allow a remote attacker to conduct cross-site scripting...

PT-2022-3840 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow a remote...

PT-2022-3755 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to bypass security...

SRC-2022-0015 : VMware Workspace ONE Access ApplicationSetupController dbTestConnection JDBC Injection Remote Code Execution Vulnerability (patch bypass)

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware Workspace ONE Access. Although authentication is required to exploit this vulnerability. The specific flaw exists within ApplicationSetupController class. The issue...

PT-2022-4080

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.8.2 Description The issue is related to a stored cross-site scripting vulnerability due to improper input sanitization in configurations. This could allow a remote attacker to perform a cross-sit...

VMware vCenter Server code-related vulnerabilities

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A code issue vulnerability exists in VMware...

PT-2022-3801 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in the Azure Site Recovery emergency recovery tool for VMWare to Azure, which can be exploited by a remote attacker to...

PT-2022-3753 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It may allow a remote attacker to disclose...

PT-2022-3847 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to potentially elevate...

PT-2022-3756 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to elevate their...

PT-2022-3702 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to execute arbitrar...

PT-2022-3826 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow a remote...

PT-2022-3816 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to elevate their...