VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in vRealize Operations. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0022 and appl...

PT-2022-4226

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 16.x prior to 16.2.4 Description The issue is related to insufficient protection of registration data, which can be exploited by a malicious actor with local user privileges to disclose user passwords of a remote...

PT-2022-4723 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It allows a remote attacker to potentially...

PT-2022-4725 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery tool for VMWare to Azure, allowing a remote attacker to execute arbitrary code. Recommendations:...

PT-2022-4229

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...

PT-2022-4699 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to elevate their...

PT-2022-4701 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow a remote...

PT-2022-4219

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to an information disclosure vulnerability in the monitoring tool for virtual infrastructure. It allows a remote attacker to disclose protected...

PT-2022-4210 · Microsoft · Azure Site Recovery +2

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery VMWare to Azure affected versions not specified Storage Spaces Direct affected versions not specified Description: The issue is related to insufficient access restriction in the emergency recovery tool for Azure Site...

PT-2022-4214 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4199 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery VMWare to Azure emergency recovery tool, which can be exploited by a remote attacker to execute...

PT-2022-4418 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure feature. This can allow a remote attacker to elevate their...

PT-2022-4417 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to exploit the weakness an...

PT-2022-4332 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restriction in the Azure Site Recovery emergency recovery tool for VMWare to Azure, which could allow a remote attacker to elevate...

CVE-2022-31672: Improper Privilege Management

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

KLA15720 SB vulnerability in VMware Workstation

Security bypass vulnerability was found in VMware Workstation. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories VMSA-2022-0023 Exploitation Related products VMware-Workstation CVE list CVE-2022-22983 high Solution Update to the latest version...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0021)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain...

A week in security (August 1 – 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foley’s Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and...

VMware Workspace ONE Access Installed

Binary data vmwareworkspaceoneaccessinstalled.nbin...

A week in security (August 1 - August 7)

Last week on Malwarebytes Labs: Have we lost the fight for data privacy? Lock and Code S03E16 Wrestling star Mick Foleys Twitter compromised, selling PS5 consoles Millions of Arris routers are vulnerable to path traversal attacks When a sextortion victim fights back How to protect yourself and yo...