VMware vRealize Log Insight Directory Traversal Vulnerability (VMSA-2016-0011)

VMware vRealize Log Insight is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware vRealize Orchestrator Detection (HTTP)

HTTP based detection of VMware vRealize Orchestrator. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMware vRealize Operations Manager Detection (HTTP)

HTTP based detection of VMware vRealize Operations Manager. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

VMware vRealize Automation Detection (HTTP)

HTTP based detection of VMware vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

VMSA-2016-0011 vRealize Log Insight update addresses directory traversal vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0011 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: vRealize Log Insight update addresses directory...

VMware vRealize Log Insight 2.x / 3.x < 3.3.2 Multiple Vulnerabilities (VMSA-2016-0008)

The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.3.2. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An...

CVE-2016-2082

Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-2081

Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2016-2082

CVE-2016-2082 affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2. The issue is a cross-site request forgery (CSRF/XSRF) vulnerability that can hijack an authenticated user’s session. The root cause is insufficient CSRF protection for certain actions. A remediation present in the conne...

CVE-2016-2081

The CVE-2016-2081 issue affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2, with a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. An unauthenticated, remote attacker could inject arbitrary script or HTML via unspecified vectors, potentia...

VMware vRealize Log Insight / VMware Aria Operations for Logs Detection (HTTP)

HTTP based detection of VMware vRealize Log Insight or VMware Aria Operations for Logs. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

VMware vRealize Log Insight Detection (SSH Login)

SSH login-based detection of VMware vRealize Log Insight. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

VMware vRealize Log Insight Multiple Vulnerabilities (VMSA-2016-0008)

VMware vRealize Log Insight is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in NSX, vCNS and vRealize Log Insight. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review VMware Security Advisories...

VMSA-2016-0008:VMware vRealize Log Insight addresses HIGH and MEDIUM security issues

VMSA-2016-0008 VMware vRealize Log Insight addresses important and moderate security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0008 VMware Security Advisory Synopsis: VMware vRealize Log Insight addresses important and moderate security issues. VMware Securi...

VMware Aria Operations Web UI Detection

Binary data vmwarevrealizeoperationsmanagerwebuidetect.nbin...

VMSA-2016-0005:VMware product updates address CRITICAL and HIGH security issues

VMSA-2016-0005.5 VMware product updates address critical and important security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0005.5 VMware Security Advisory Synopsis: VMware product updates address critical and important security issues. VMware Security Advisory...

VMware vRealize Automation Web UI Detection

Binary data vmwarevrealizeautomationwebuidetect.nbin...

VMware vRealize Automation 6.x < 6.2.4 Unspecified Stored XSS (VMSA-2016-0003)

The VMware vRealize Automation application running on the remote host is 6.x prior to 6.2.4. It is, therefore, affected by an unspecified stored cross-site scripting vulnerability due to improper validation of user-supplied input. A remote attacker can exploit this by convincing a user to follow ...