Vulnerabilidades do Vmware Vrealize Suite Lifecycle Manager
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Vmware Vrealize Suite Lifecycle Manager: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager
CVE-2022-22960
Alta · 7.8
KEV Alta · 68 Exploit público CWE-732 13/04/2022
VMware Multiple Products Privilege Escalation Vulnerability
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
CVE-2022-22954
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-94 11/04/2022
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.
CVE-2021-21975
Alta · 7.5
KEV Urgente · 85 Exploit público Ransomware CWE-918 31/03/2021
VMware Server Side Request Forgery in vRealize Operations Manager API
Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.
CVE-2020-4006
Crítica · 9.1
KEV Alta · 60 CWE-78 23/11/2020
Multiple VMware Products Command Injection Vulnerability
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.