Egor Dimitrenko

The issue is related to the incorrect restriction of XML external entities, which can lead to XML external entity (XXE) attacks. A remote attacker can potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. The vulnerability is associated with insufficient validation of user-input XML data, allowing an attacker to view the contents of arbitrary files on the server or initiate requests to external systems.

Name of the Vulnerable Software and Affected Versions: Zoom on-premise Meeting Connector Controller versions prior to 4.6.348.20201217 Zoom on-premise Meeting Connector MMR versions prior to 4.6.348.20201217 Zoom on-premise Recording Connector versions prior to 3.8.42.20200905 Zoom on-premise Virtual Room Connector versions prior to 4.4.6620.20201110 Zoom on-premise Virtual Room Connector Load Balancer versions prior to 2.5.5495.20210326 Description: The network proxy page on the web portal for the affected Zoom products fails to validate input sent in requests to update the network proxy configuration, which could lead to remote command injection on the on-premise image by a web portal administrator. Recommendations: For Zoom on-premise Meeting Connector Controller versions prior to 4.6.348.20201217, update to version 4.6.348.20201217 or later. For Zoom on-premise Meeting Connector MMR versions prior to 4.6.348.20201217, update to version 4.6.348.20201217 or later. For Zoom on-premise Recording Connector versions prior to 3.8.42.20200905, update to version 3.8.42.20200905 or later. For Zoom on-premise Virtual Room Connector versions prior to 4.4.6620.20201110, update to version 4.4.6620.20201110 or later. For Zoom on-premise Virtual Room Connector Load Balancer versions prior to 2.5.5495.20210326, update to version 2.5.5495.20210326 or later.

Name of the Vulnerable Software and Affected Versions: Zoom on-premise Meeting Connector versions prior to 4.6.360.20210325 Zoom on-premise Meeting Connector MMR versions prior to 4.6.360.20210325 Zoom on-premise Recording Connector versions prior to 3.8.44.20210326 Zoom on-premise Virtual Room Connector versions prior to 4.4.6752.20210326 Zoom on-premise Virtual Room Connector Load Balancer versions prior to 2.5.5495.20210326 Description: The network address administrative settings web portal for the Zoom on-premise products fails to validate input sent in requests to update the network configuration, which could lead to remote command injection on the on-premise image by the web portal administrators. Recommendations: For Zoom on-premise Meeting Connector versions prior to 4.6.360.20210325, update to version 4.6.360.20210325 or later. For Zoom on-premise Meeting Connector MMR versions prior to 4.6.360.20210325, update to version 4.6.360.20210325 or later. For Zoom on-premise Recording Connector versions prior to 3.8.44.20210326, update to version 3.8.44.20210326 or later. For Zoom on-premise Virtual Room Connector versions prior to 4.4.6752.20210326, update to version 4.4.6752.20210326 or later. For Zoom on-premise Virtual Room Connector Load Balancer versions prior to 2.5.5495.20210326, update to version 2.5.5495.20210326 or later.

The issue is related to an arbitrary file read vulnerability in the vRealize Operations Manager API. A malicious actor with administrative access can read any arbitrary file on the server, leading to information disclosure. The vulnerability is associated with insufficient validation of incoming requests.

The issue is related to an insecure object reference vulnerability in the vRealize Operations Manager API. This vulnerability can be exploited by a malicious actor with administrative access, potentially allowing them to modify other users' information and leading to an account takeover. The vulnerability is also associated with insufficient validation of incoming requests, which could allow a remote attacker to disclose protected information.

The issue is related to insufficient argument validation in a command, allowing a remote attacker to execute arbitrary commands on the target system. This can lead to unauthorized remote code execution on the vRealize Business for Cloud Virtual Appliance. A malicious actor with network access may exploit this issue.

Name of the Vulnerable Software and Affected Versions: VMware Carbon Black Cloud Workload appliance versions 1.0.0 through 1.0.1 Description: The issue is related to an authentication bypass vulnerability in the administrative interface of the VMware Carbon Black Cloud Workload appliance. This vulnerability may allow a malicious actor with network access to obtain a valid authentication token, resulting in the ability to view and alter administrative configuration settings. The vulnerability is related to deficiencies in the authentication procedure. Recommendations: For versions 1.0.0 and 1.0.1, update to a version newer than 1.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to minimize the risk of exploitation.

The issue is related to an uncontrolled upload of dangerous file types in the vRealize Operations API interface. This could allow a remote attacker to upload malicious files. An authenticated malicious actor with network access to the vRealize Operations Manager API may be able to write files to arbitrary locations on the underlying photon operating system.

The issue is related to insufficient server-side request validation in the vRealize Operations API, which can be exploited by a remote attacker to gain unauthorized access to sensitive information. This can lead to a Server Side Request Forgery (SSRF) attack, potentially allowing the theft of administrative credentials.

The issue is related to a post-authentication command injection vulnerability. This vulnerability may allow an authenticated admin user to perform a remote code execution. The vulnerability is associated with insufficient checking of arguments passed to a command in the "Startup Configuration" page of the VMware vSphere Replication extension for asynchronous replication of virtual machines.

The issue is related to a cross-site scripting vulnerability (XSS) due to incomplete input validation. An authorized user can exploit this to execute malicious scripts.

The issue is related to a command injection vulnerability due to insufficient parameter validation check. This allows an authorized user to exploit the vulnerability and take control of the user router system.

The issue is related to improper access control, which may allow an unauthorized user to perform unauthorized operations on the router.