Target Device running on VMware going into hung state with Event - Too many retries Initiate reconnect

Please consider below scenarios and symptoms: VMware6.7 hosts the Target devices. VMXNet3 is attached to the Target devices. Intermittently the Target Devices go into a hung state. Review of the Wireshark trace shows that the Target Device is constantly reconnecting with the Citrix Provisioning...

SaltStack Salt Master Server Root Key Disclosure

This module exploits unauthenticated access to the prepauthinfo method in the SaltStack Salt master's ZeroMQ request server, for versions 2019.2.3 and earlier and 3000.1 and earlier, to disclose the root key used to authenticate administrative commands to the master. VMware vRealize Operations...

VMSA-2020-0008 : VMware ESXi patches address Stored Cross-Site Scripting (XSS) vulnerability

a. VMware ESXi patches address Stored Cross-Site Scripting XSS vulnerability CVE-2020-3955 Description : The VMware ESXi Host Client does not properly neutralize script-related HTML when viewing virtual machines attributes. A malicious actor with access to modify the system properties of a virtua...

Join Us for the Virtual Connect 2020 Conference

Every year, VMware Carbon Black Connect brings together some of the best and brightest in security to collaborate on solving today’s most pressing problems and to learn about the future of endpoint security. While 2020 marks the first year that Connect will be held in a virtual setting, it does n...

CVE-2020-3955

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base sco...

Design/Logic Flaw

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base sco...

CVE-2020-3955

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base sco...

CVE-2020-3955

CVE-2020-3955 affects VMware ESXi 6.5 and 6.7 via a stored XSS in the ESXi Host Client when viewing virtual machine attributes. The underlying issue is improper neutralization of script-related HTML, allowing an authenticated attacker who can modify VM properties (e.g., hostname) to inject script...

Photon OS 3.0: Systemd PHSA-2020-3.0-0083

An update of the systemd package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0083. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136097;...

Photon OS 1.0: Linux PHSA-2020-1.0-0290

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136107...

Photon OS 1.0: Pyyaml PHSA-2020-1.0-0290

An update of the PyYAML package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13610...

VMware ESXi Cross-Site Scripting Vulnerability

VMware ESXi is a server virtualization platform from VMware that can be installed directly on physical servers. A cross-site scripting vulnerability exists in VMware ESXi versions 6.5 and 6.7. An attacker can exploit this vulnerability to inject malicious scripts...

VMware Releases Security Updates for ESXi

VMware has released security updates to address a vulnerability in ESXi. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Security Advisory...

Photon OS 1.0: Systemd PHSA-2020-1.0-0290

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Lz4 PHSA-2020-3.0-0083

An update of the lz4 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0083. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136094; scriptversion"1.5...

Photon OS 1.0: Libvirt PHSA-2020-1.0-0289

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Erlang PHSA-2020-1.0-0289

An update of the erlang package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13603...

Photon OS 1.0: Nettle PHSA-2020-1.0-0289

An update of the nettle package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13603...

vmware_escape

This is an exploit module for VMware Workstation prior to version 12.5.5. The exploit targets a vulnerability in the way VMware handles certain types of memory access, allowing an attacker to execute arbitrary code on the host system. The exploit is designed to be used by an attacker who has gain...

Cannot edit configuration of VMware VM via ESXi after Instant Recovery from Veeam Agent backup

Challenge When you complete Instant VM Recovery from the Veeam Agent backup, then try to edit the VM configuration via ESXi, the following error occurs: "Enter a disk size which is larger than its original capacity." Then you try to edit the decimal virtual disk size via ESXi, and another error...