VMware

Tanzu Application Service For Virtual Machines

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-20891

  • EPSS 0.32%
  • Published 26.07.2023 06:15:10
  • Last modified 21.11.2024 07:41:45

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platf...

6

CVE-2020-5414

  • EPSS 0.56%
  • Published 31.07.2020 20:15:13
  • Last modified 21.11.2024 05:34:07

VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin password. This credential is redacted on VMware Tanzu Oper...