VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware vRealize Operations vROps Manager SSRF RCE', 'Description' = %q This module exploits a pre-auth SSRF CVE-2021-21975 and post-auth file wri...

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution Exploit

This Metasploit module exploits a pre-auth server-side request forgery CVE-2021-21975 and post-auth file write CVE-2021-21983 in VMware vRealize Operations Manager to leak admin creds and write/execute a JSP payload. CVE-2021-21975 affects the /casa/nodes/thumbprints endpoint, and CVE-2021-21983...

Exploit for Path Traversal in Vmware Cloud_Foundation

vsphereyeeter.sh is an automated bash script to exploit vuln...

VMware Carbon Black Delivers High-Fidelity Insight at Every Step of MITRE Engenuity ATT&CK® Evaluation

For the third year in a row, VMware Carbon Black today announced its participation in MITRE Engenuity’s third annual ATT&CK® Evaluations with VMware Carbon Black Cloud. VMware Carbon Black Cloud delivered robust telemetry coverage with correlated, high-fidelity alerts at each and every step of th...

Photon OS 4.0: Rust PHSA-2021-4.0-0012

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0012. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148910;...

Photon OS 3.0: Linux PHSA-2021-3.0-0221

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0221. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148901;...

Photon OS 3.0: Nettle PHSA-2021-3.0-0223

An update of the nettle package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148907;...

Photon OS 3.0: Rust PHSA-2021-3.0-0223

An update of the rust package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148908;...

VMware NSX-T Privilege License and Access Control Issues Vulnerability

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

Photon OS 3.0: Redis PHSA-2021-3.0-0220

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148813...

Photon OS 1.0: Linux PHSA-2021-1.0-0382

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0382. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148823...

VMware Releases Security Update

VMware has released a security update to address a vulnerability affecting NSX-T. An attacker can exploit this vulnerability to take control of an affected system CISA encourages users and administrators to review VMSA-2021-0006 and apply the necessary update and workaround. This product is...

Photon OS 1.0: Openvswitch PHSA-2021-1.0-0381

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0381. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Redis PHSA-2021-2.0-0336

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0336. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148824...

Ubuntu 16.04 LTS : OpenSLP vulnerability (USN-4919-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4919-1 advisory. It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash or possibly execute arbitrary code...

Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0337

An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0337. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: C PHSA-2021-2.0-0337

An update of the c package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0337. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148822;...

Photon OS 1.0: C PHSA-2021-1.0-0378

An update of the c package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0378. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148814;...

Photon OS 3.0: Elasticsearch PHSA-2021-3.0-0219

An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0219. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2021-21981

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC Role based access control role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level...