Patch/Configuration Management, Vulnerability Management

VMWare updates Tools fixing race condition

Share

VMWare issued a single security advisory and patch for a vulnerability in its Tools product.

The flaw, CVE-2020-3941, affects VMware Tools for Windows version 10.x.y and can be mitigated by updating to version 11.0.

The vulnerability, rated as important, is a race condition that can be exploited enabling an unauthorized person from escalating their privileges on a Windows VM.

Related

Critical Apache OFBiz flaw patched

Such a vulnerability evades fixes issued for previous OFBiz bugs, tracked as CVE-2024-38856, CVE-2024-36104, and CVE-2024-32113, all of which have resulted from a fragmentation issue within the controller-view map that could allow unauthenticated remote code or SQL query execution, according to Rapid7 security researchers.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.