VMware Cloud Community
JimShorts
Contributor
Contributor
‎07-13-2020 02:20 PM

CVE - Local Access Question

Hi,

I have a silly question. I'm pretty new and I'm learning about ESXis. Recently, I received a few CVE notices, it often talks about "A malicious actor with local access" or "A malicious actor with local administrative privileges".

Does this mean the user needs to connect directly with the console or does it mean that as long as they can somehow remote using either the UI, SSH it's vulnerable?

Reply
0 Kudos
2 Replies
scott28tt
VMware Employee
VMware Employee
‎07-13-2020 03:19 PM

Where exactly did you receive the notices?


-------------------------------------------------------------------------------------------------------------------------------------------------------------

Although I am a VMware employee I contribute to VMware Communities voluntarily (ie. not in any official capacity)
VMware Training & Certification blog
Reply
0 Kudos
JimShorts
Contributor
Contributor
‎07-13-2020 04:05 PM

We have a RSS feed that tells us the latest CVE from VMWare.

Here is an example of one:

VMSA-2020-0015

Reply
0 Kudos