CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

CVE-2019-5538

CVE-2019-5538 concerns a lack of certificate validation during VMware vCenter Server Appliance File-Based Backup and Restore, enabling a man-in-the-middle to intercept data in transit over SCP. Affected products are VMware vCenter Server Appliance 6.7 (before 6.7u3a) and 6.5 (before 6.5u3d). The ...

CVE-2019-5537

Vulnerability: CVE-2019-5537 affects VMware vCenter Server Appliance 6.7 (before 6.7u3a) and 6.5 (before 6.5u3d), arising from lack of certificate validation in File-Based Backup and Restore, enabling an MITM attacker to intercept data in transit over FTPS/HTTPS. Connected advisory VMSA-2019-0018...

CVE-2019-5537

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over FTP...

VMSA-2019-0019 : Denial-of-service vulnerability

ESXi shader denial-of-service vulnerability - CVE-2019-5536 VMware ESXi, Workstation and Fusion contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on...

VMware vCenter Server Appliance Information Disclosure Vulnerability

VMware vCenter Server Appliance is a set of pre-configured Linux virtual machines from VMware. An information disclosure vulnerability exists in VMware vCenter Server Appliance versions 6.7 and 6.5, which arises from errors in configuration and other errors in the operation of a networked system ...

VMware ESXi, VMware Workstation and VMware Fusion Denial of Service Vulnerabilities

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...

VMware Fusion 11 Shader Functionality Denial Of Service

Summary An exploitable denial of service vulnerability exists in VMware Fusion 11.1.0 13668589. A specially crafted pixel shader can cause a denial of service. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from a VMware...

Photon OS 2.0: E2Fsprogs PHSA-2019-2.0-0184

An update of the e2fsprogs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0184. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Multiple VMware Products CVE-2019-5536 Denial of Service Vulnerability

Description Multiple VMware products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected VMWare Esxi 6.5 VMWare Esxi 6.7 VMWare Fusion 11.0 VMWare Fusion 11.0.1 VMWare Fusion 11.0.2 VMWare Fusion 11.0.3...

KLA12120 DoS vulnerability in VMware Workstation and Player

A denial of service vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories VMSA-2019-0019 Related products VMware-Workstation VMware-Player CVE list CVE-2019-5536 high Solution Update to the latest...

VMware vCenter Server Appliance Multiple Information Disclosure Vulnerabilities

Description VMware vCenter Server Appliance is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to obtain sensitive information that may aid in further attacks. VMware vCenter Server 6.5 and 6.7 are vulnerable; other versions may also be affected...

Photon OS 3.0: Openjdk8 PHSA-2019-3.0-0035

An update of the openjdk8 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130102;...

Photon OS 3.0: Subversion PHSA-2019-3.0-0035

An update of the subversion package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130104;...

Photon OS 2.0: Sudo PHSA-2019-2.0-0183

An update of the sudo package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0183. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130107;...

Photon OS 3.0: Curl PHSA-2019-3.0-0032

An update of the curl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0032. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130111;...

VMSA-2019-0018:VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions

VMware Security Advisories Advisory ID| VMSA-2019-0018 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.8 Synopsis| VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions CVE-2019-5537, CVE-2019-5538 Issue Date| 2019-10-24...

Photon OS 3.0: Yarn PHSA-2019-3.0-0034

An update of the yarn package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130123;...

Photon OS 3.0: Libvirt PHSA-2019-3.0-0032

An update of the libvirt package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0032. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130112;...

Photon OS 3.0: Rsyslog PHSA-2019-3.0-0034

An update of the rsyslog package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130121;...