VMware Updates
1943Warning Date
Severity Level
Warning Number
Target Sector
22 November, 2020
● High
2020-2096
All
Description:
VMware has released a security update to address vulnerabilities in the following products:
- VMware ESXi
- VMware Workstation Pro / Player (Workstation)
- VMware Fusion Pro / Fusion (Fusion)
- VMware Cloud Foundation
- VMware SD-WAN Orchestrator (SD-WAN Orchestrator)
Threats:
An attacker could exploit these vulnerabilities by causing the following:
- SQL Injection
- Information Disclosure
- Privilege escalation
- Execute arbitrary code
Best practice and Recommendations:
The CERT team encourages users to review VMware security advisory and apply the necessary updates: