Debian/open-vm-tools: high 7.5
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUI
Action: Upgrade open-vm-tools to 2:12.3.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:12.3.5-1 | - |
Fixed versions
| 2:12.3.5-1 |
Sources
- osv: DEBIAN-CVE-2023-34058#Debian:14/open-vm-tools
- https://security-tracker.debian.org/tracker/CVE-2023-34058
published · modified · JSON