Tanzu Application Service For Virtual Machines

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-20891 Jul 26, 06:15 MEDIUM PATCH This Month

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure VMware Tanzu Application Service For Virtual Machines Isolation Segment

NVD

CVSS 3.1

6.5

EPSS

0.5%

CVE-2020-5414 Jul 31, 20:15 MEDIUM This Month

VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains an App Autoscaler that logs the UAA admin. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure VMware Operations Manager Tanzu Application Service For Virtual Machines

NVD

CVSS 3.1

5.7

EPSS

0.7%

CVE-2023-20891

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure VMware Tanzu Application Service For Virtual Machines +1

NVD

CVE-2020-5414

EPSS 1% CVSS 5.7

MEDIUM This Month

Information Disclosure VMware Operations Manager +1

NVD