CVE-2021-3607

An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory,...

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

Workspace ONE Intelligent Hub 20.3.8.0 - (VMware Hub Health Monitoring Service) Unquoted Service Pat

Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path Discovery by: Ismael Nava Vendor Homepage: https://www.vmware.com/mx/products/workspace-one/intelligent-hub.html Software Links : https://getwsone.com/ Tested Version: 20.3.8.0...

Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path

Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path Discovery by: Ismael Nava Discovery Date: 06-16-2021 Vendor Homepage: https://www.vmware.com/mx/products/workspace-one/intelligent-hub.html Software Links : https://getwsone.com/...

Workspace ONE Intelligent Hub 20.3.8.0 Unquoted Service Path

Exploit Title: Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path Discovery by: Ismael Nava Discovery Date: 06-16-2021 Vendor Homepage: https://www.vmware.com/mx/products/workspace-one/intelligent-hub.html Software Links : https://getwsone.com/...

Vulnerability fixed in VMware Workspace ONE UEM

VMware has fixed a vulnerability in Workspace ONE UEM console. An unauthenticated remote malicious person can exploit the exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack could result in the execution of arbitrary script code in the browser used to visit the...

Vulnerability fixed in VMware vRealize Business for Cloud

VMware has fixed a vulnerability in virtual appliances of vRealize Business for Cloud. An unauthenticated remote malicious agent could remote user could potentially exploit the vulnerability to execute arbitrary execute arbitrary code. To do so, the malicious party must maliciously send network...

Security Bulletin: Privilege escalation vulnerability in IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments (CVE-2021-20532)

Summary IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments may allow a local user to escalate their privileges. UPDATED: 14 June 2021 - Added 7.1 fix for IBM Spectrum Protect for Virtual Environments: Data Protection for VMware. Vulnerability Details CVEI...

Security Bulletin: Genivia gSOAP vulnerabilities affect IBM Spectrum Protect for Virtual Environments:Data Protection for VMware and Spectrum Protect Client (CVE-2020-13575, CVE-2020-13578, CVE-2020-13574, CVE-2020-13577, CVE-2020-13576, CVE-2020-21783)

Summary Vulnerabilities in Genivia gSOAP, such as denial of service or execution of arbitrary code on the system, may affect IBM Spectrum Protect for Virtual Environments: Data Protection for VMware. UPDATED: 14 June 2021 - Added 7.1 fix for IBM Spectrum Protect for Virtual Enviornments:Data...

VMSA-2021-0011:VMware Tools for Windows update addresses a denial-of-service vulnerability

Advisory ID: VMSA-2021-0011 CVSSv3 Range: 3.3 Issue Date:2021-06-17 Updated On: 2021-06-17 Initial Advisory CVEs: CVE-2021-21997 Synopsis: VMware Tools for Windows update addresses a denial-of-service vulnerability CVE-2021-21997 RSS Feed Download PDF Download Text File Share this page on social...

Photon OS 1.0: Glibc PHSA-2021-1.0-0401

An update of the glibc package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0401. The text itself is copyright C VMware, Inc...

Vulnerability fixed in RabbitMQ

A vulnerability has been fixed in RabbitMQ. A malicious party could potentially exploit the vulnerability to cause a denial-of-service cause by sending a rogue AMQP message to the RabbitMQ server that can receive AMQP 1.0 messages. VMware Tanzu has released updates to fix the vulnerability fix in...

Photon OS 4.0: Linux PHSA-2021-4.0-0041

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0041. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Photon OS 2.0: Tar PHSA-2021-2.0-0352

An update of the tar package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0352. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'...

The vulnerability of the Cortado ThinPrint (TTC Parser) component in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a perpetrator to disclose protected information.

The vulnerability of the Cortado ThinPrint component TTC Parser, which is present in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability allows a malicious acto...

The vulnerability of the Cortado ThinPrint component (JPEG2000 Parser) in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a malicious individual to disclose protected information.

The vulnerability of the Cortado ThinPrint component JPEG2000 Parser in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client system relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to...

Are Virtual Machines the New Gold for Cyber Criminals?

ARCHIVED STORY Are Virtual Machines the New Gold for Cyber Criminals? ATR Operational Intelligence Team · JUN 10, 2021 Introduction Virtualization technology has been an IT cornerstone for organization for years now. It revolutionized the way organizations can scale up IT systems in a heartbeat,...

Are Virtual Machines the New Gold for Cyber Criminals?

ARCHIVED STORY Are Virtual Machines the New Gold for Cyber Criminals? ATR Operational Intelligence Team · JUN 10, 2021 Introduction Virtualization technology has been an IT cornerstone for organization for years now. It revolutionized the way organizations can scale up IT systems in a heartbeat,...

Photon OS 3.0: Linux PHSA-2021-3.0-0251

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0251. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Photon OS 2.0: Glibc PHSA-2021-2.0-0354

An update of the glibc package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0354. The text itself is copyright C VMware, Inc...