Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager

swarm.ptsecurity.com | vulnerability | #cloud | #rce | #authentication-bypass | #vmware | #carbon-black | #vrealize

Summary

Part two of PT SWARM's VMware research: an auth bypass in Carbon Black Cloud Workload Appliance (CVE-2021-21978) and a chain in vRealize Operations (CVE-2021-21975/22023/21983) leading to RCE.
Published
Collected

original ↗

Related coverage

  1. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  2. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  3. Hunting for bugs in VMware: View Planner and vRealize Business for Cloud (swarm.ptsecurity.com)
  4. Unauthorized RCE in VMware vCenter (swarm.ptsecurity.com)
  5. Chaining N-days to Compromise All: Part 5 — VMware Workstation Guest-to-Host Escape (theori.io)
  6. Chaining N-days to Compromise All: Part 4 — VMware Workstation Information leakage (theori.io)

back