GHSA-h7h7-f9wh-xhj8HighCVSS 7.5
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...
🔗 CVE IDs covered (1)
📋 Description
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in-the-middle (MITM) network positioning between vCenter server and the virtual machine may be able to bypass SAML token signature verification, to perform VMware Tools Guest Operations.
🔗 References (11)
- https://nvd.nist.gov/vuln/detail/CVE-2023-20900
- https://www.vmware.com/security/advisories/VMSA-2023-0019.html
- http://www.openwall.com/lists/oss-security/2023/08/31/1
- https://www.debian.org/security/2023/dsa-5493
- https://lists.debian.org/debian-lts-announce/2023/10/msg00000.html
- http://www.openwall.com/lists/oss-security/2023/10/27/1
- https://lists.fedoraproject.org/archives/list/[email protected]/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG
- https://lists.fedoraproject.org/archives/list/[email protected]/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH
- https://security.netapp.com/advisory/ntap-20231013-0002
- https://github.com/advisories/GHSA-h7h7-f9wh-xhj8