Releases Security Advisory for Multiple Products (September 17, 2019)

Ref# VMware | Date: Sep 20th 2019

Description

The VMware has released security updates to address vulnerabilities affecting ESXI and vCenter. It is recommended that you take the necessary precautions by ensuring your products are always updated.

Advisory ID

VMSA-2019-001

Advisory Severity

Important

CVSSv3 Range

4.2-7.7

Synopsis

VMware ESXi and vCenter Server updates address command injection and information disclosure vulnerabilities. (CVE-2017-16544, CVE-2019-5531, CVE-2019-5532, CVE-2019-5534)

Issue Date

2019-09-16

Updated on

2019-09-19

CVE(s)

CVE-2017-16544, CVE-2019-5531, CVE-2019-5532, CVE-2019-5534

Impacted Products

  1. VMware vSphere ESXI (ESXI)
  2. VMware vCeter Server (vCenter)

For more information on the updates you can follow this url:

https://www.vmware.com/security/advisories/VMSA-2019-0012.html 

 

The Guyana National CIRT recommends users and administration to review these updates and to apply them where necessary.

Reference

      VMware Release security Updates (US-Cert)

https://www.us-cert.gov/ncas/current-activity/2019/09/17/vmware-releases-security-updates-multiple-products