|Number of vulnerabilities||1|
|Exploitation vector||Local network|
open-vm-tools (Red Hat package)
Operating systems & Components / Operating system package or component
|Vendor||Red Hat Inc.|
This security bulletin contains one medium risk vulnerability.
CWE-310 - Cryptographic Issues
Exploit availability: NoDescription
The vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to improper verification of SAML token signature. A remote attacker can bypass SAML token signature verification and perform man-in-the-middle (MITM) network positioning between vCenter server and the virtual machine.Mitigation
Install updates from vendor's website.
open-vm-tools (Red Hat package): before 10.3.10-3.el8_1.4CPE2.3
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?