comparison of vmware workstation player 12 and 12.5

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability.

A malicious actor with network access can trigger a server-side template injection that may result in remote code execution. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote code execution. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities (CVE-2022-22957 & CVE-2022-22958). A malicious actor with administrator and network access can trigger a remote code execution.Īn authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution. VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.

Successful exploitation can lead to a remote code execution. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. VMware vRealize Operations contains an information disclosure vulnerability.

Comparison of vmware workstation player 12 and 12.5