CVE-2016-5332

VMware vRealize Log Insight 2.x and 3.x prior to 3.6.0 are affected by a directory traversal vulnerability that may allow an unauthenticated remote attacker to disclose arbitrary files via directory traversal. Root cause cited in VMware advisories is improper input handling leading to partial inf...

CVE-2016-5335

CVE-2016-5335 affects VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1. The issue is a local privilege escalation via unspecified vectors, allowing a low-privileged user to obtain root. VMware issued VMSA-2016-0013 and provided patches: Identity Manager 2.7 and vRea...

CVE-2016-5336

CVE-2016-5336 affects VMware vRealize Automation 7.0.x before 7.1. A remote attacker could execute arbitrary code on the appliance; exploitation is possible without authentication per sources, potentially yielding access to a low-privileged account. The issue is discussed alongside CVE-2016-5335 ...

PT-2016-6368

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.6.0 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For versions 2.x through 3.x before 3.6.0, update to version 3.6.0 or...

CVE-2016-5336: Undefined Security Weakness

VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2016-6371

Name of the Vulnerable Software and Affected Versions VMware Identity Manager versions prior to 2.7 vRealize Automation versions 7.0.x through 7.0.x before 7.1 Description The issue allows local users to obtain root access via unspecified vectors. Recommendations For VMware Identity Manager...

CVE-2016-5332: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2016-6372

Name of the Vulnerable Software and Affected Versions VMware vRealize Automation versions 7.0.x Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. Recommendations For versions 7.0.x, update to version 7.1 or later to resolve the issue...

CVE-2016-5335: Undefined Security Weakness

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...

VMware vRealize Automation 7.0.x < 7.1 Multiple Vulnerabilities (VMSA-2016-0013)

The VMware vRealize Automation application running on the remote host is version 7.0.x prior to 7.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to elevate privileges from a low-privileged account to root access...

VMware Identity Manager vRealize Automation Patches

VMware this week patched a single vulnerability that pops up in two of its products that allows an attacker to elevate privileges on a compromised machine. The virtualization company patched CVE-2016-5335 in its Identity Manager and vRealize Automation software. “Exploitation of this issue may le...

VMware Identity Manager and vRealize Automation Local Elevation of Privilege Vulnerability

VMware Identity Manager and vRealize Automation are both products of VMware, Inc. The former is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and single sign-on SSO for SaaS, web, cloud, and native mobile applications, while the latter is a...

VMware vRealize Automation Remote Command Execution Vulnerability

VMware vRealize Automation is a suite of cloud automation software from VMware. The software supports automated delivery of personalized infrastructure, deployment across multi-vendor, hybrid cloud infrastructures, simplified application release automation and continuous delivery. A remote code...

VMware vRealize Automation updates address multiple security issues (VMSA-2016-0013)

VMware vRealize Automation updates address multiple security issues. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMWare Releases Security Updates

VMWare has released security updates to address vulnerabilities in VMware Identity Manager and vRealize Automation. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review VMware Security...

VMSA-2016-0013:VMware Identity Manager and vRealize Automation updates address multiple security issues

VMSA-2016-0013 VMware Identity Manager and vRealize Automation updates address multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0013 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Identity Manager and vRealiz...

VMware vRealize Log Insight 2.x / 3.x < 3.6.0 Directory Traversal File Disclosure (VMSA-2016-0011)

The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.6.0. It is, therefore, affected by a directory traversal vulnerability due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to disclose arbitrary...

VMware vRealize Log Insight Directory Traversal Vulnerability

VMware vRealize Log Insight is a suite of log management and analysis tools from VMware. The tool provides real-time log management capabilities for VMware virtual machines by enabling intelligent machine learning-based grouping, searching and troubleshooting across physical, virtual and cloud...

VMware vRealize Log Insight Directory Traversal Vulnerability (VMSA-2016-0011)

VMware vRealize Log Insight is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware vRealize Orchestrator Detection (HTTP)

HTTP based detection of VMware vRealize Orchestrator. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...