VMware Issues Patches to Fix New Flaws Affecting Multiple Products

🗓️ 26 Aug 2021 07:40:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 84 Views

VMware issues patches for multiple vulnerabilities in vRealize Operations, Cloud Foundation, and Log Insigh

Reporter	Title	Published	Views	Family All 85
Gitee	Exploit for Authorization Bypass Through User-Controlled Key in Vmware Cloud_Foundation	12 Mar 202012:30	–	gitee
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring tool for virtual infrastructure vRealize Operations, a platform for virtualization at VMware Cloud Foundation, and the application lifecycle management software vRealize Suite Lifecycle Manager lies in insufficient validation of incoming requests, allowing attackers to disclose sensitive information.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API interface of the system’s unified endpoint management console for VMware Workspace ONE UEM allows a attacker to trigger a service failure.	10 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the log management tool vRealize Log Insight and the VMware Cloud Foundation virtualization platform arises from insufficient measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.	24 Dec 202200:00	–	bdu_fstec
Circl	CVE-2021-22022	25 Aug 202113:29	–	circl

26 Aug 2021 07:50Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26.5

CVSS 3.17.5

EPSS0.0116

vmware patches vulnerabilities vrealize operations cloud foundation log insight security updates cve cvss information disclosure access control server side request forgery cross-site scripting denial-of-service