13355 matches found
Introducing VMware Carbon Black Cloud Workload™
If you know Carbon Black, you know that we helped invent Endpoint Detection and Response EDR and pioneered the field of next-generation anti-virus NGAV and malware protection. If you know VMware, you know we helped invent virtualization and have championed moving core business servers and service...
EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-2097)
According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c.CVE-2019-15890 - QEMU 4.1.0 has a memory leak in...
Photon OS 3.0: Linux PHSA-2020-3.0-0144
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0144. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140785;...
VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)
The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...
VMware Fusion 11.x < 11.5.7 Privilege Escalation (VMSA-2020-0020)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x. It is, therefore, affected by a privilege escalation vulnerability due to the way it allows configuring the system wide path. An authenticated, local attacker with normal user privileges can exploit this issue to...
VMware Workstation 15.x < 15.5.7 Multiple Vulnerabilities (VMSA-2020-0020)
The version of VMware Workstation installed on the remote host is 15.x. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A malicious actor with norm...
CVE-2020-3977
VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...
CVE-2020-3977
VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...
Authentication flaw
VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...
CVE-2020-3977
VMware Horizon DaaS 7.x and 8.x before 8.0.1 Update 1 contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit th...
CVE-2020-3977
CVE-2020-3977 affects VMware Horizon DaaS 7.x and 8.x prior to 8.0.1 Update 1. Root cause: broken authentication due to how first-factor authentication is handled, enabling potential bypass of two-factor authentication for an attacker with a legitimate Horizon DaaS account. Impact: partial integr...
Horizon DaaS update addresses a broken authentication vulnerability (CVE-2020-3977)
3. Broken authentication vulnerability CVE-2020-3977 Horizon DaaS contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base...
The vulnerability of VMware Fusion’s hypervisor, related to privilege management errors, allows a perpetrator to elevate their privileges.
The vulnerability of VMware Fusion relates to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, related to authentication deficiencies, allows attackers to cause partial service interruptions.
The vulnerability of the virtual infrastructure management tools VMware vCenter Server and VMware ESXi hypervisor is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to cause partial service disruption from a remote location...
The vulnerability of the Cortado ThinPrint parser component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser on the EMF platform in VMware Workstation and Horizon Client for Windows involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...
The vulnerability of the Cortado ThinPrint parser for JPEG2000 from the VMware Workstation and Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser for JPEG2000 on the VMware Workstation and Horizon Client for Windows hypervisor platform is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a...
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a attacker to trigger a service failure.
The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...
The vulnerability of the application and user management software for various VMware App Volumes virtual environments lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the application and user management software for various VMware App Volumes virtual environments is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...