CVE-2020-5425

Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the same username, from two different identity...

Authentication flaw

Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the same username, from two different identity...

CVE-2020-5425

CVE-2020-5425 affects VMware Tanzu SSO: all versions prior to 1.11.3, 1.12.x prior to 1.12.4, and 1.13.x prior to 1.13.1 are vulnerable to a user-impersonation attack. If two users are logged into the SSO operator dashboard concurrently with the same username from different identity providers, on...

The vulnerability of the client of the VMware Horizon Client virtualization system for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the VMware Horizon Client client system for Windows operating systems relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2020-5425

Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the same username, from two different identity...

The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion allows a malicious actor to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause system failures, or gain unauthorized access to protecte...

The vulnerability of the openslp hypervisor package affects VMware ESXi, VMware Workstation, and VMware Fusion, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion relates to writing beyond the buffer boundaries, allowing attackers to compromise the integrity of protected information.

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Security Bulletin: Vulnerability identified in VMWare affects Cloud Pak System (CVE-2020-3976)

Summary Vulnerability has been identified in VMware component used by Cloud Pak System. VMware component is at risk if enabled for external remote access. IBM Cloud Pak Systems by default does not provide remote external access. Vulnerability details and information about fixes has been published...

VMware Horizon Server Cross-Site Scripting Vulnerability

VMware Horizon is a suite of foundation platforms for virtual desktops and applications from VMware. It enables end users to access all of their virtual desktops, applications and online services through a digital workspace. A cross-site scripting vulnerability exists in VMware Horizon Server,...

VMware VCenter Server Directory Service Authentication Bypass (CVE-2020-3952)

An authentication bypass vulnerability exists in VMware VCenter Server Directory Service. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Photon OS 3.0: Oniguruma PHSA-2020-3.0-0155

An update of the oniguruma package has been released. File data PhotonOSPHSA-2020-30-0155oniguruma.nasl...

Photon OS 3.0: Containerd PHSA-2020-3.0-0155

An update of the containerd package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0155. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid141867;...

CVE-2020-3997

VMware Horizon Server 7.x prior to 7.10.3 or 7.13.0 contains a Cross Site Scripting XSS vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed...

CVE-2020-3997

VMware Horizon Server 7.x prior to 7.10.3 or 7.13.0 contains a Cross Site Scripting XSS vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed...

CVE-2020-3998

VMware Horizon Client for Windows 5.x prior to 5.5.0 contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes...

Cross site scripting

VMware Horizon Server 7.x prior to 7.10.3 or 7.13.0 contains a Cross Site Scripting XSS vulnerability. Successful exploitation of this issue may allow an attacker to inject malicious script which will be executed...

Information disclosure

VMware Horizon Client for Windows 5.x prior to 5.5.0 contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes...

CVE-2020-3998

VMware Horizon Client for Windows 5.x prior to 5.5.0 contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes...

CVE-2020-3998

CVE-2020-3998 affects VMware Horizon Client for Windows versions prior to 5.5.0. The vulnerability is an information-disclosure flaw in the Horizon Client on Windows where a malicious local user can retrieve hashed credentials if the client crashes. Affected software: Horizon Client for Windows (...