15015 matches found
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
CVE-2022-22983
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
Information disclosure
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...
Authentication flaw
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
Privilege escalation
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
Information disclosure
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...
Design/Logic Flaw
VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...
What we know about VMWare CVE-2022–31656 and CVE-2022–31659
Takeaways: VMWare Workspace ONE vulnerabilities CVE-2022-31656 and CVE-2022-31659 work in tandem to allow a remote attacker with network access to conduct remote code execution on the server. Imperva Threat Research has seen a sharp rise in attacks since a POC was published on August 9, mostly...
ignition: configs are accessible from unprivileged containers in VMs running on VMware products
A vulnerability was found in Ignition, where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets...
VulnCheck KEV: CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
VMware Workspace One Access Privilege Escalation
The vulnerabilities of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools are related to deficiencies in access control. Exploiting these vulnerabilities ca...
VMware Workspace One Access Output Injection
The vulnerability of the VMware Workspace One Access application management platform and the VMware Identity Manager vIDM administration console is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow a malicious actor to redirect a user...
VMware Workspace One Access Code Generation Code Execution
The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is related to improper code generation. Exploiting this vulnerability allows a...
VMware Workspace One Access XSS
The vulnerability of the VMware Workspace One Access application management platform, as well as the VMware Identity Manager administration consoles and VMware vRealize Automation virtual infrastructure management tools, exists due to the lack of security measures taken to protect the website...
VMware Workspace One Access Code Generation Code Execution
The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is related to improper code generation. Exploiting this vulnerability allows a...
VMware vRealize Operations security vulnerabilities
VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4, which stems from an...
VMware vRealize Operations log information leakage vulnerability
VMware vRealize Operations is an application from VMware, Inc. a unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations version 8.6.4 that originates from a...
Intel Ethernet VMWare driver security vulnerabilities
Intel Ethernet VMWare drivers is an Ethernet VMWare driver from Intel Corporation USA. A security vulnerability exists in Intel Ethernet VMWare drivers that stems from insufficient control flow management. An attacker could exploit this vulnerability to conduct a denial of service attack...