VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.0.5, 3.0.14, 2.13.24, 2.11.42, 4.0.4, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF API admin credentials and can push new malicious versions of an application. In a default deployment non-admin users do not have access to the platform system audit logs.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- VMware VMware Tanzu Application Service for VMs
From 4.0.x · fixed in 4.0.5; From 3.0.x · fixed in 3.0.14; From 2.13.x · fixed in 2.13.24; From 2.11.x · fixed in 2.11.42
- VMware Isolation segment
From 4.0.x · fixed in 4.0.4; From 3.0.x · fixed in 3.0.13; From 2.13.x · fixed in 2.13.20; From 2.11.x · fixed in 2.11.35