Security News > 2020 > April > Details Released for Flaw Allowing Full Control Over VMware Deployments
Cloud and data center security solutions provider Guardicore on Wednesday made available technical information on a critical VMware vCenter Server vulnerability that can be exploited by an attacker to gain full control over the targeted VMware deployment.
Few details have been made available by VMware so researchers at Guardicore have decided to analyze the patch in an effort to identify the changes made by the virtualization giant to address the vulnerability.
According to Guardicore, an attacker with network access to a vCenter Server LDAP service can create a user with full privileges on the vCenter Directory, which would give them full control over the VMware deployment.
VMware last month released two patches for a privilege escalation vulnerability affecting the macOS version of Fusion.
The researchers who reported the flaw to VMware said both of them were incomplete.