tocsin

Debian/open-vm-tools: high 7.5

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUI

Action: Upgrade open-vm-tools to 2:12.2.0-1+deb12u2 or later.

Affected

introducedfixedlast affected
02:12.2.0-1+deb12u2-

Fixed versions

2:12.2.0-1+deb12u2

Sources

published · modified · JSON