VMware Tools Authentication Bypass Vulnerability

概要

参考情報

• openwall.com/lists/oss-security/2023/10/16/11 · Mailing List
• openwall.com/lists/oss-security/2023/10/16/2 · Mailing List
• lists.debian.org/debian-lts-announce/2023/08/msg00020.html · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH · Mailing List
• security.netapp.com/advisory/ntap-20230725-0001 · Third Party Advisory
• debian.org/security/2023/dsa-5493 · Mailing List
• vmware.com/security/advisories/VMSA-2023-0013.html

tools のその他の脆弱性

• CVE-2025-41244高 7.8悪用確認済み（CISA KEV）VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative …
• CVE-2023-34058高 7.5VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https…
• CVE-2023-34057高 7.8VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may el…
• CVE-2023-20900高 7.5A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A95…
• CVE-2022-31693中 5.5VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A mali…