{"id":"CVE-2023-20900","aliases":["ALPINE-CVE-2023-20900","ALSA-2023:5312","ALSA-2023:5313","DEBIAN-CVE-2023-20900","DLA-3597-1","DSA-5493-1","EUVD-2023-25069","GHSA-h7h7-f9wh-xhj8","OESA-2023-1629","OESA-2023-1630","OESA-2023-1631","RHSA-2023:5210","RHSA-2023:5213","RHSA-2023:5216","RHSA-2023:5217","RHSA-2023:5218","RHSA-2023:5220","RHSA-2023:5312","RHSA-2023:5313","RHSA-2024:5315","RLSA-2023:5312","RLSA-2023:5313","SUSE-SU-2023:3504-1","SUSE-SU-2023:3505-1","SUSE-SU-2023:3506-1","SUSE-SU-2023:3507-1","SUSE-SU-2023:3795-1","SUSE-SU-2023:3835-1","UBUNTU-CVE-2023-20900","USN-6365-1","USN-6365-2","openSUSE-SU-2024:13186-1"],"status":"published","title":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01475,"percentile":0.74168,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-294"],"published":"2023-08-31T00:00:00Z","modified":"2026-11-03T06:32:42Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"open-vm-tools","fixed_in":["12.3.0-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools","fixed_in":["12.1.5-2.el8_8.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-desktop","fixed_in":["12.1.5-2.el8_8.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-salt-minion","fixed_in":["12.1.5-2.el8_8.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"open-vm-tools-sdmp","fixed_in":["12.1.5-2.el8_8.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools","fixed_in":["12.1.5-1.el9_2.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","fixed_in":["12.1.5-1.el9_2.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","fixed_in":["12.1.5-1.el9_2.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","fixed_in":["12.1.5-1.el9_2.3.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","fixed_in":["12.1.5-1.el9_2.3.alma.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"open-vm-tools","fixed_in":["2:12.2.0-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"open-vm-tools","fixed_in":["2:12.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"open-vm-tools","fixed_in":["2:12.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"open-vm-tools","fixed_in":["2:10.3.10-1+deb10u5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.0.0-4.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:10.3.10-3.el8_1.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.2.0-2.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-desktop","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-devel","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-test","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-devel","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-test","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-desktop","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-devel","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-test","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-debuginfo","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-desktop","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-devel","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-test","fixed_in":["0:11.0.5-3.el7_9.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.3.5-1.el9_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:11.3.5-1.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-salt-minion","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debuginfo","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debugsource","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop-debuginfo","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-salt-minion","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp-debuginfo","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test-debuginfo","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools","fixed_in":["0:10.3.0-2.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-debuginfo","fixed_in":["0:10.3.0-2.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-desktop","fixed_in":["0:10.3.0-2.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-devel","fixed_in":["0:10.3.0-2.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-test","fixed_in":["0:10.3.0-2.el7_7.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"open-vm-tools","fixed_in":["0:12.1.5-2.el8_8.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"open-vm-tools","fixed_in":["0:12.1.5-1.el9_2.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"open-vm-tools","fixed_in":["12.2.0-4.56.2","12.3.0-4.59.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"open-vm-tools","fixed_in":["12.2.0-4.56.2","12.3.0-4.59.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"open-vm-tools","fixed_in":["12.2.0-150300.33.1","12.3.0-150300.37.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","fixed_in":["2:10.2.0-3~ubuntu0.16.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","fixed_in":["2:11.0.5-4ubuntu0.18.04.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","fixed_in":["2:11.3.0-2ubuntu0~ubuntu20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","fixed_in":["2:12.1.5-3~ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"open-vm-tools","fixed_in":["12.2.0-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-2.el8_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-2.el8_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-2.el8_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-2.el8_8.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9_2.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9_2.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9_2.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9_2.3.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-1.el9_2.3.alma.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u1"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.3.10-1+deb10u5"}]}],"versions":["2:10.3.10-1","2:10.3.10-1+deb10u1","2:10.3.10-1+deb10u2","2:10.3.10-1+deb10u2~bpo9+1","2:10.3.10-1+deb10u3","2:10.3.10-1+deb10u4"]},{"source":"osv","ecosystem":"Debian:11","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.2.5-2+deb11u2"}]}],"versions":["2:11.2.5-2","2:11.2.5-2+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.0-1+deb12u1"}]}],"versions":["2:12.2.0-1","2:12.2.0-1+deb12u1~bpo11+1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5-3.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5-3.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.1.5-2.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.0-4.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.10-3.el8_1.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.0-2.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.5-3.el7_9.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el9_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3.5-1.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-desktop-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-sdmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"open-vm-tools-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.0-2.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.0-2.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-desktop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.0-2.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.0-2.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"open-vm-tools-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3.0-2.el7_7.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-2.el8_8.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.5-1.el9_2.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150100.4.37.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.3.5-150200.5.16.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-4.56.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-4.56.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-150300.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-4.59.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-4.59.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.0-150300.37.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm3"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm2"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.6"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.5-3~ubuntu0.22.04.3"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.3.0-2ubuntu0~ubuntu20.04.6"}]}],"versions":["2:10.3.10-3ubuntu1","2:11.0.1-2","2:11.0.1-3","2:11.0.1-3ubuntu1","2:11.0.1-4","2:11.0.5-1","2:11.0.5-2","2:11.0.5-3","2:11.0.5-4","2:11.1.0-2~ubuntu20.04.1","2:11.1.5-1~ubuntu20.04.2","2:11.2.5-2ubuntu1~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.1","2:11.3.0-2ubuntu0~ubuntu20.04.2","2:11.3.0-2ubuntu0~ubuntu20.04.3","2:11.3.0-2ubuntu0~ubuntu20.04.4","2:11.3.0-2ubuntu0~ubuntu20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.1.5-3~ubuntu0.22.04.3"}]}],"versions":["2:11.3.0-2ubuntu1","2:11.3.0-2ubuntu2","2:11.3.5-1","2:11.3.5-1ubuntu2","2:11.3.5-1ubuntu3","2:11.3.5-1ubuntu4","2:11.3.5-1ubuntu4.1","2:12.1.0-1~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.1","2:12.1.5-3~ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:10.2.0-3~ubuntu0.16.04.1+esm3"}]}],"versions":["2:9.10.2-2822639-1ubuntu3","2:10.0.0-3000743-3ubuntu1","2:10.0.7-3227872-2ubuntu1","2:10.0.7-3227872-5ubuntu1~16.04.1","2:10.0.7-3227872-5ubuntu1~16.04.2","2:10.2.0-3~ubuntu0.16.04.1","2:10.2.0-3~ubuntu0.16.04.1+esm1","2:10.2.0-3~ubuntu0.16.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:11.0.5-4ubuntu0.18.04.3+esm2"}]}],"versions":["2:10.1.10-3","2:10.1.10-3build1","2:10.1.15-1","2:10.1.15-1build1","2:10.2.0-2","2:10.2.0-2build1","2:10.2.0-3","2:10.2.0-3ubuntu1","2:10.2.0-3ubuntu2","2:10.2.0-3ubuntu3","2:10.3.0-0ubuntu1~18.04.1","2:10.3.0-0ubuntu1~18.04.2","2:10.3.0-0ubuntu1~18.04.3","2:10.3.5-7~ubuntu0.18.04.1","2:10.3.10-1~ubuntu0.18.04.1","2:11.0.1-2ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.1","2:11.0.5-4ubuntu0.18.04.2","2:11.0.5-4ubuntu0.18.04.3","2:11.0.5-4ubuntu0.18.04.3+esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"open-vm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.0-6.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"vmware","product":"open_vm_tools"},{"vendor":"vmware","product":"tools"}],"references":[{"url":"https://www.vmware.com/security/advisories/VMSA-2023-0019.html","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2023/08/31/1","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5493","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/","tags":["x_transferred","Mailing List","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/","tags":["x_transferred","Mailing List","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/","tags":["x_transferred","Mailing List","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00000.html","tags":["x_transferred","Mailing List","article"]},{"url":"https://security.netapp.com/advisory/ntap-20231013-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/27/1","tags":["x_transferred","Mailing List","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20900","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH"},{"url":"https://security.netapp.com/advisory/ntap-20231013-0002"},{"url":"https://github.com/advisories/GHSA-h7h7-f9wh-xhj8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-20900","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20900","tags":["report"]},{"url":"https://bugzilla.redhat.com/2236542","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-5312.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5313","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5313.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-20900","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20867","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1630","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1631","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5210","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236542","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5210.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20900","tags":["advisory","report"]},{"url":"https://github.com/vmware/open-vm-tools/blob/CVE-2023-20900.patch/CVE-2023-20900.patch","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5213","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5213.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5216","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5216.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5217","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5217.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5218","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5218.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5220","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5220.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5312.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5313.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5315","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5315.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5312","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5313","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233504-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212143","tags":["report"]},{"url":"https://bugzilla.suse.com/1214566","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20900","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233505-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233506-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233507-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233795-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205927","tags":["report"]},{"url":"https://bugzilla.suse.com/1214850","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233835-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-20900","tags":["report"]},{"url":"https://www.vmware.com/security/advisories/VMSA-2023-0019","tags":["report"]},{"url":"https://github.com/vmware/open-vm-tools/tree/CVE-2023-20900.patch","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6365-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6365-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T09:45:43.13Z","modified":"2026-10-08T21:13:53.121Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-25069","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T09:45:43Z","modified":"2026-10-08T21:13:53Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:26.452288Z"}],"ghsa":[{"id":"GHSA-h7h7-f9wh-xhj8","title":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...","description":"VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in-the-middle (MITM) network positioning between vCenter server and the virtual machine may be able to bypass SAML token signature verification, to perform VMware Tools Guest Operations.","status":"published","published":"2023-08-31T12:30:52Z","modified":"2026-10-09T00:32:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T15:12:59.31428Z"}],"nvd":[{"id":"CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T10:15:08.247Z","modified":"2026-10-08T22:17:22.59Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"ALPINE-CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T10:15:08.247Z","modified":"2026-11-03T06:32:42.359704848Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T10:15:08.247Z","modified":"2026-04-10T04:55:06.683181Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T10:15:08.247Z","modified":"2026-10-26T18:00:27.331018559Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1629","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nA fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)\r\n\r\nA malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)","status":"published","published":"2023-09-15T11:06:04Z","modified":"2026-08-18T01:17:01.592493129Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1630","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nA fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)\r\n\r\nA malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)","status":"published","published":"2023-09-15T11:06:04Z","modified":"2026-08-18T01:17:01.822619953Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1631","title":"open-vm-tools security update","description":"The  project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and libraries of .\r\n\r\nSecurity Fix(es):\r\n\r\nA fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.(CVE-2023-20867)\r\n\r\nA malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .(CVE-2023-20900)","status":"published","published":"2023-09-15T11:06:04Z","modified":"2026-08-18T01:17:01.467859701Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:5210","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:09:02Z","modified":"2026-09-20T10:01:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5213","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:09:10Z","modified":"2026-09-20T10:01:44Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5216","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:08:42Z","modified":"2026-09-20T10:01:44Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5217","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:08:51Z","modified":"2026-09-20T10:01:45Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5218","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:08:24Z","modified":"2026-09-20T10:01:45Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5220","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:08:32Z","modified":"2026-09-20T10:01:46Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5312","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:09:28Z","modified":"2026-09-20T10:01:50Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5313","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:09:19Z","modified":"2026-09-20T10:01:50Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:5315","title":"Red Hat Security Advisory: open-vm-tools security update","status":"published","published":"2024-09-16T13:09:37Z","modified":"2026-09-20T10:04:04Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"UBUNTU-CVE-2023-20900","description":"A malicious actor that has been granted  Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .","status":"published","published":"2023-08-31T00:00:00Z","modified":"2026-04-22T14:00:56.125494Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:18.756095Z"},{"id":"ALSA-2023:5312","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-20900)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-20T00:00:00Z","modified":"2026-10-29T11:02:26.87227749Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5313","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-20900)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-20T00:00:00Z","modified":"2026-10-29T11:30:57.637258902Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-3597-1","title":"open-vm-tools - security update","status":"published","published":"2023-10-01T00:00:00Z","modified":"2026-03-09T01:22:00.33451Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5493-1","title":"open-vm-tools - security update","status":"published","published":"2023-09-10T00:00:00Z","modified":"2026-03-09T02:09:47.69553Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2024:13186-1","title":"libvmtools-devel-12.2.0-6.1 on GA media","description":"These are all security issues fixed in the libvmtools-devel-12.2.0-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:21:55.385926Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:5312","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-20900)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-26T13:25:26.426311Z","modified":"2026-02-04T22:00:09.676159Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:5313","title":"Important: open-vm-tools security update","description":"The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.\n\nSecurity Fix(es):\n\n* open-vm-tools: SAML token signature bypass (CVE-2023-20900)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-26T13:26:44.414234Z","modified":"2026-02-05T12:15:07.986305Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:3504-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).\n- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).\n","status":"published","published":"2023-08-31T17:55:53Z","modified":"2026-02-04T04:08:05.403274Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3505-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).\n- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).\n","status":"published","published":"2023-08-31T17:56:02Z","modified":"2026-02-04T03:37:05.86496Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3506-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).\n","status":"published","published":"2023-08-31T17:56:13Z","modified":"2026-02-04T03:27:14.851413Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3507-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\n- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).\n\nThis update also ships a open-vm-tools-containerinfo plugin. (jsc#PED-3421)\n","status":"published","published":"2023-08-31T17:58:14Z","modified":"2026-02-04T02:36:05.866896Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3795-1","title":"Security update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.3.0 (build 22234872) (bsc#1214850)\n\n- There are no new features in the open-vm-tools 12.3.0 release. This is\n  primarily a maintenance release that addresses a few critical problems,\n  including:\n  - This release integrates CVE-2023-20900 without the need for a patch.\n    For more information on this vulnerability and its impact on VMware\n    products, see\n    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.\n  - A tools.conf configuration setting is available to temporaily direct\n    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior\n    of ignoring file systems already frozen.\n  - Building of the VMware Guest Authentication Service (VGAuth) using\n    'xml-security-c' and 'xerces-c' is being deprecated.\n  - A number of Coverity reported issues have been addressed.\n  - A number of GitHub issues and pull requests have been handled.\n    Please see the Resolves Issues section of the Release Notes.\n  - For issues resolved in this release, see the Resolved Issues section\n    of the Release Notes.\n- For complete details, see:\n  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0\n- Release Notes are available at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md\n- The granular changes that have gone into the 12.3.0 release are in the\n  ChangeLog at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog\n- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests\n- jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.\n","status":"published","published":"2023-09-26T16:06:28Z","modified":"2026-02-04T03:21:48.183845Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3835-1","title":"Securitys update for open-vm-tools","description":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.3.0 (build 22234872) (bsc#1214850)\n\n- There are no new features in the open-vm-tools 12.3.0 release. This is\n  primarily a maintenance release that addresses a few critical problems,\n  including:\n\n  - This release integrates CVE-2023-20900 without the need for a patch.\n    For more information on this vulnerability and its impact on VMware\n    products, see\n    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.\n  - A tools.conf configuration setting is available to temporaily direct\n    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior\n    of ignoring file systems already frozen.\n  - Building of the VMware Guest Authentication Service (VGAuth) using\n    'xml-security-c' and 'xerces-c' is being deprecated.\n  - A number of Coverity reported issues have been addressed.\n  - A number of GitHub issues and pull requests have been handled.\n    Please see the Resolves Issues section of the Release Notes.\n  - For issues resolved in this release, see the Resolved Issues section\n    of the Release Notes.\n- For complete details, see:\n  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0\n- Release Notes are available at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md\n- The granular changes that have gone into the 12.3.0 release are in the\n  ChangeLog at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog\n- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests\n- jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.\n","status":"published","published":"2023-09-27T17:20:57Z","modified":"2026-02-04T04:14:16.307919Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6365-1","title":"open-vm-tools vulnerability","description":"It was discovered that Open VM Tools incorrectly handled SAML tokens. A\nremote attacker could possibly use this issue to bypass SAML token\nsignature verification and perform VMware Tools Guest Operations.\n","status":"published","published":"2023-09-13T14:54:49Z","modified":"2026-04-22T10:39:10.515271Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6365-2","title":"open-vm-tools vulnerability","description":"USN-6365-1 fixed a vulnerability in Open VM Tools. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Open VM Tools incorrectly handled SAML tokens. A\n remote attacker could possibly use this issue to bypass SAML token\n signature verification and perform VMware Tools Guest Operations.\n","status":"published","published":"2023-09-25T10:55:21Z","modified":"2026-06-25T13:32:20.065140081Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}