VMware Releases Security Updates for Multiple Products

Threat ID:: CC-3890
Threat Severity:: Information only
Published:: 24 June 2021 11:51 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

VMware Carbon Black App Control (AppC) Versions: 8.6.x prior to 8.6.2, 8.5.x prior to 8.5.8, and 8.1.x and earlier

VMware Tools for Windows Versions: 11.x prior to 11.2.6

VMware Remote Console (VMRC) for Windows Versions: 12.x prior to 12.0.1

VMware App Volumes Versions: 4 prior to 4 R2103, and 2.x prior to 2.18.10

Threat details

Introduction

VMware has released two security advisories for vulnerabilities found in VMware products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The first advisory, VMSA-2021-0012, is marked as critical and addresses an authentication bypass vulnerability (CVE-2021-21998) in VMware Carbon Black App Control. The second advisory, VMSA-2021-0013, is marked as important and concerns a privilege escalation vulnerability (CVE-2021-21999) in VMware Tools for Windows, VMRC for Windows, and VMware App Volumes.

Remediation advice

Affected organisations are encouraged to review VMware security advisories VMSA-2021-0012 and VMSA-2021-0013 and apply any relevant updates.

CVE Vulnerabilities

Status Published

CVE-2021-21998

VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to authenticate.

Status Published

CVE-2021-21999

VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1), VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges.

Last edited: 24 June 2021 2:37 pm