UCSF IT Technology

VMware has released security updates to address Critical vulnerabilities affecting the VMware Cloud Foundation. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system.

GitLab released  security updates to address a Critical vulnerability in self-managed installations of the GitLab Community Edition (CE) and Enterprise Edition (EE). An unauthenticated attacker with access to any signed saml document (by the IdP) can forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as an arbitrary user within the vulnerable system.

Google has released new versions of Chrome to address vulnerabilities in Google Chrome. For a complete description of the vulnerabilities and affected systems go to Chrome Releases.IT Security Read more about IT Security service offerings.

VMware has released security updates to address Critical vulnerabilities affecting the VMware vCenter Server platform. An attacker with network access to the server could send a specially crafted packet to execute remote code.

D-Link released security updates to address Critical vulnerabilities in the D-Link Routers. An attacker could exploit this vulnerability to execute arbitrary code or access the devices using hardcoded credentials.