Red Hat Security Advisory

RHSA-2023:3949

open-vm-tools security update

Released 2023-06-29 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) open-vm-tools-12.1.5-2.el8_8, open-vm-tools-desktop-12.1.5-2.el8_8, open-vm-tools-salt-minion-12.1.5-2.el8_8 +1

Fixes 1 record

TI-2023-07286 CVE-2023-20867 · GHSA-qm59-f7vh-3m2p

VMware Tools Authentication Bypass Vulnerability

HIGH 76KEV

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

CVSS 3.1LOW 3.9 Local High privileges No interaction EPSS 0.13638 Published 2023-06-13 Fixed in 12.2.5 CWE-287