Reply to thread

Message

<blockquote data-quote="Ink" data-source="post: 1056273" data-attributes="member: 3"><p>[URL unfurl=&quot;true&quot;]https://www.vmware.com/security/advisories/VMSA-2023-0019.html[/URL]</p><p></p><hr /><h4>Impacted Products</h4>
<ul>
<li data-xf-list-type="ul">VMware Tools</li>
</ul><p></p><p></p><h4>SAML Token Signature Bypass vulnerability (CVE-2023-20900)</h4><p></p><p></p><table style='width: 100%'><tr><th>Product</th><th>Version</th><th>Running on</th><th>CVE Identifier</th><th>CVSSv3</th><th>Severity</th><th>Fixed Version</th><th>Workarounds</th><th>Additional Documentation</th></tr><tr><td>VMware Tools</td><td>12.x.x, 11.x.x, 10.3.x</td><td>Windows</td><td>CVE-2023-20900</td><td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" target="_blank">7.5</a></td><td>Important</td><td><a href="https://docs.vmware.com/en/VMware-Tools/12.3/rn/vmware-tools-1230-release-notes/index.html" target="_blank">12.3.0</a></td><td>None</td><td>None</td></tr><tr><td>VMware Tools</td><td>10.3.x</td><td>Linux</td><td>CVE-2023-20900</td><td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" target="_blank">7.5</a></td><td>Important</td><td><a href="https://docs.vmware.com/en/VMware-Tools/10.3/rn/vmware-tools-10326-release-notes/index.html" target="_blank">[1] 10.3.26</a></td><td>None</td><td>None</td></tr><tr><td>[2] VMware Tools (open-vm-tools)</td><td>12.x.x, 11.x.x, 10.3.x</td><td>Linux</td><td>CVE-2023-20900</td><td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" target="_blank">7.5</a></td><td>Important</td><td>[3] 12.3.0</td><td>None</td><td>None</td></tr></table><p></p><p></p><p>Release notes: <a href="https://docs.vmware.com/en/VMware-Tools/12.3/rn/vmware-tools-1230-release-notes/index.html" target="_blank">https://docs.vmware.com/en/VMware-Tools/12.3/rn/vmware-tools-1230-release-notes/index.html</a></p></blockquote><p></p>

[QUOTE="Ink, post: 1056273, member: 3"] [URL unfurl="true"]https://www.vmware.com/security/advisories/VMSA-2023-0019.html[/URL] [HR][/HR] [HEADING=3]Impacted Products[/HEADING] [LIST] [*]VMware Tools [/LIST] [HEADING=3]SAML Token Signature Bypass vulnerability (CVE-2023-20900)[/HEADING] [TABLE] [TR] [TH]Product[/TH] [TH]Version[/TH] [TH]Running on[/TH] [TH]CVE Identifier[/TH] [TH]CVSSv3[/TH] [TH]Severity[/TH] [TH]Fixed Version[/TH] [TH]Workarounds[/TH] [TH]Additional Documentation[/TH] [/TR] [TR] [TD]VMware Tools[/TD] [TD]12.x.x, 11.x.x, 10.3.x[/TD] [TD]Windows[/TD] [TD]CVE-2023-20900[/TD] [TD][URL='https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H']7.5[/URL][/TD] [TD]Important[/TD] [TD][URL='https://docs.vmware.com/en/VMware-Tools/12.3/rn/vmware-tools-1230-release-notes/index.html']12.3.0[/URL][/TD] [TD]None[/TD] [TD]None[/TD] [/TR] [TR] [TD]VMware Tools[/TD] [TD]10.3.x[/TD] [TD]Linux[/TD] [TD]CVE-2023-20900[/TD] [TD][URL='https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H']7.5[/URL][/TD] [TD]Important[/TD] [TD][URL='https://docs.vmware.com/en/VMware-Tools/10.3/rn/vmware-tools-10326-release-notes/index.html'][1] 10.3.26[/URL][/TD] [TD]None[/TD] [TD]None[/TD] [/TR] [TR] [TD][2] VMware Tools (open-vm-tools)[/TD] [TD]12.x.x, 11.x.x, 10.3.x[/TD] [TD]Linux[/TD] [TD]CVE-2023-20900[/TD] [TD][URL='https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H']7.5[/URL][/TD] [TD]Important[/TD] [TD][3] 12.3.0[/TD] [TD]None[/TD] [TD]None[/TD] [/TR] [/TABLE] Release notes: [URL]https://docs.vmware.com/en/VMware-Tools/12.3/rn/vmware-tools-1230-release-notes/index.html[/URL] [/QUOTE]

Verification