CVE-2012-1512: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the internal browser in vSphere Client in VMware vSphere 4.1 before Update 2 and 5.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via a crafted log-file entry...

PT-2012-3318

Name of the Vulnerable Software and Affected Versions VMware vSphere versions 4.1 before Update 2 VMware vSphere versions 5.0 before Update 1 Description A cross-site scripting XSS issue exists in the internal browser of the vSphere Client, allowing remote attackers to inject arbitrary web script...

VMSA-2012-0005:VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

VMSA-2012-0005.4 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0005.4 VMware Security Advisory Synopsis: VMware vCenter Server...

How to perform SureBackup recovery verification manually in Standard edition

Solution To start, use the Instant VM Recovery feature. For a boot up test, go through the Instant Recovery wizard and power on the VM, but do not select a checkbox to connect the VM to a network. Please note that since there is no network connectivity, some applications will not start since they...

Changed block tracking cannot be enabled: virtual hardware version 7 or later required

Challenge The backup or replication job is processed slower than expected and gives the warning message "changed block tracking cannot be enabled: virtual hardware version 7 or later required." The job works without Changed Block Tracking, and the "changed block tracking cannot be enabled: virtua...

ESX hardware status change however, the change is not reflected in OpsMgr.

The overall health status of the host can be updated in certain scenarios, but the hardware item health status is not correctly updated in OpsMgr. An important symptom is that the health state of the hardware item may be "Unknown" grey in VMware vSphere client...

Unable to access the virtual machine configuration: Invalid datastore path

Challenge SureBackup/Instant Recovery session fails with the error: Unable to access the virtual machine configuration: Invalid datastore path Log Files list: Error Failed to register VM name 'XYZaf5107a9120c43e687c33c3d6f4c073c', is template 'False' System.Exception Error Unable to access the...

CVE-2011-1789

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

CVE-2011-1789

The CVE-2011-1789 entry describes an unsigned self-extracting installer in the vSphere Client Installer for VMware vCenter 4.0 (before Update 3) and 4.1 (before Update 1), as well as VMware ESXi 4.x (before 4.1 Update 1) and ESX 4.x (before 4.1 Update 1). The root cause is the lack of a digital s...

CVE-2011-1789

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...

PT-2011-3370

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 Update 2 VMware vCenter versions 4.1 through 4.1 Update 0 VMware ESXi versions 4.x through 4.1 Update 0 VMware ESX versions 4.x through 4.1 Update 0 Description The issue is related to the self-extractin...

VMWare vCenter Server / vSphere Client security vulnerabilities

Directory traversal, information leakage...

VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2011-0008 Synopsis: VMware vCenter Server and vSphere Client security vulnerabilities Issue date: 2011-05-05 Updated on: 2011-05-05...

VMSA-2011-0008:VMware vCenter Server and vSphere Client security vulnerabilities

VMSA-2011-0008 VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0008 VMware Security Advisory Synopsis: VMware vCenter Server and vSphere Client security vulnerabilities VMware Security Advisory Issue date:...