Tag: vmware

For the VMware users here.

VMWare’s vCenter Server is vulnerable to a remote code execution (RCE) vulnerability. That means, an attacker would be able to execute code on any machine with that software reachable from the internet. Executing arbitrary code would also allow malware to replicate, AKA worm. The vulnerability is tracked as CVE-2021-21985.

Code execution flaw in vCenter is exploited to install web shell on unpatched machines.
From the article

Source: This is not a drill: VMware vuln with 9.8 severity rating is under attack | Ars Technica

June 5, 2021
VMware acquires Bitnami

Bitnami is a name that many may know from packaged applications available on the major cloud marketplaces. The company packages up applications for easier consumption and adoption, and the concept became quite popular. Today, VMWare announced the acquisition of Bitnami for an undisclosed amount of money.

VMware announced today that it’s acquiring Bitnami, the package application company that was a member of the Y Combinator Winter 2013 class. The companies didn’t share the purchase price. With Bitnami, the company can now deliver more than 130 popular software packages in a variety of formats, such as Docker containers or virtual machine, an […]

Source: VMware acquires Bitnami to deliver packaged applications anywhere | TechCrunch

May 17, 2019
Escaping VMware Workstation through COM1

A bug in VMWare’s vprintproxy.exe process allows the guest OS to escape it’s environment through the COM1 serial port.

via: Escaping VMware Workstation through COM1

June 22, 2015