Vulnerabilitycritical

VMware Patches Critical Vulnerability in Carbon Black App Control Product

The Hacker Newsby @TheHackersNewsFeb 22, 2023 · 07:59 UTC (Feb 22, 2023)1 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20858 CVE-2022-22951 CVE-2022-22952 CVE-2023-20855

Tags: cve-2023-20858 cve-2022-22951 cve-2022-22952 cve-2023-20855 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2022-22951 +1 related CVE CVE-2022-22952	VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection…	9.1	20%	Mar 23, 2022
CVE-2023-20855	VMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability	8.8	1%	Feb 22, 2023
CVE-2023-20858	VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability	7.2	17%	Feb 22, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Feb 22, 2023 Vulnerability / Enterprise Security VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product. Tracked as CVE-2023-20858 , the shortcoming carries a CVSS score of 9. 1 out of a maximum of 10 and impacts App Control versions 8.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.