vmware horizon daas vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Vmware Esxi 6.0 Vmware Esxi 6.5 Vmware Esxi 6.7 Vmware Horizon Daas Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.7 Redhat Enterprise Linux Server Aus 7.7 Redhat Enterprise Linux Server Tus 7.7 Openslp Openslp 1.2.1 Openslp Openslp 2.0.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31

2 Github repositories

8.8

CVSSv3

VMware Horizon DaaS (7.x prior to 8.0.0) contains a broken authentication vulnerability that may allow an malicious user to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.

Vmware Horizon Daas

6.5

CVSSv3

VMware Horizon DaaS (7.x and 8.x prior to 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an malicious user to bypass two-factor authentication proc...

Vmware Horizon Daas 7.0.0 Vmware Horizon Daas

5.5

CVSSv3

VMware Horizon DaaS prior to 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation...

Vmware Horizon Daas

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook