• vRealize Operations for Horizon Adapter

vRealize Operations for Horizon Adapter contains multiple security vulnerabilities.  Patches are available to remediate these vulnerabilities in affected VMware products.

vRealize Operations for Horizon Adapter uses a JMX RMI service which is not securely configured. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.0.

An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.

To remediate CVE-2020-3943, apply the patches listed in the 'Fixed Version' column of the 'Resolution Matrix' found below.

None.

None.

None.

VMware would like to thank An Trinh of Viettel Cyber Security for reporting this issue to us.

vRealize Operations for Horizon Adapter has an improper trust store configuration leading to authentication bypass. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.6.

An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

To remediate CVE-2020-3944, apply the patches listed in the 'Fixed Version' column of the 'Resolution Matrix' found below.

None.

None.

None.

VMware would like to thank An Trinh of Viettel Cyber Security for reporting this issue to us.

vRealize Operations for Horizon Adapter contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may obtain sensitive information which can be used to bypass the adapter authentication mechanism.

To remediate CVE-2020-3945, apply the patches listed in the 'Fixed Version' column of the 'Resolution Matrix' found below.

None.

None.

None.

VMware would like to thank An Trinh of Viettel Cyber Security for reporting this issue to us.

Fixed Version(s) and Release Notes: 

vRealize Operations for Horizon Adapter 6.7.1

Downloads and Documentation:
https://my.vmware.com/web/vmware/details?downloadGroup=V4H-671-GA&productId=475&rPId=42574
https://docs.vmware.com/en/VMware-vRealize-Operations-for-Horizon/

vRealize Operations for Horizon Adapter 6.6.1

Downloads and Documentation:

https://my.vmware.com/web/vmware/details?downloadGroup=V4H-661-GA&productId=475&rPId=42574

https://docs.vmware.com/en/VMware-vRealize-Operations-for-Horizon/

Mitre CVE Dictionary Links:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3943
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3944
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3945 

FIRST CVSSv3 Calculator: 
CVE-2020-3943 https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE-2020-3944 https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVE-2020-3945 https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

2020-02-18: VMSA-2020-0003  
Initial security advisory in conjunction with the release of vRealize Operations for Horizon Adapter 6.7.1 and 6.6.1 on 2020-02-18.

E-mail list for product security notifications and announcements:

https://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce 

This Security Advisory is posted to the following lists:  

[email protected]  

[email protected]  

[email protected] 

E-mail: [email protected]

PGP key at:https://kb.vmware.com/kb/1055 

VMware Security Advisories

https://www.vmware.com/security/advisories 

VMware Security Response Policy

https://www.vmware.com/support/policies/security_response.html 

VMware Lifecycle Support Phases

https://www.vmware.com/support/policies/lifecycle.html 

VMware Security & Compliance Blog  

https://blogs.vmware.com/security 

Twitter

https://twitter.com/VMwareSRC

Copyright 2020 VMware Inc. All rights reserved.