VMware urges admins to remove deprecated, vulnerable auth plug-in – Source: www.bleepingcomputer.com

Source: www.bleepingcomputer.com – Author: Sergiu Gatlan VMware urged admins today to remove a discontinued authentication plugin exposed to authentication relay and session hijack attacks in Windows domain environments via two security vulnerabilities left unpatched. The vulnerable VMware Enhanced Authentication Plug-in (EAP) enables seamless login to vSphere’s management interfaces via integrated Windows Authentication and Windows-based smart card […]

La entrada VMware urges admins to remove deprecated, vulnerable auth plug-in – Source: www.bleepingcomputer.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.