build 6ddc7a35 | content blog-content@417154f · 338 posts | profiles 32 · corpus 315 | ● 0 skipped | format run

$ soultec get post/vmware-security-advisory -o yaml$ soultec get post/vmware-security-advisory -o json$ soultec get post/vmware-security-advisory -o toml$ soultec get post/vmware-security-advisory -o xml$ python3 vmware-security-advisory.pyPS> ./vmware-security-advisory.ps1$ go run vmware-security-advisory.go$ node vmware-security-advisory.js

apiVersion: soultec.ch/v1kind: Postmetadata: name: vmware-security-advisory locale: en labels: author: daniel-stadelmann capability/security: 1.91 vendor/vmware: 0.98 annotations: source: blog-content/posts/en/vmware-security-advisory.md route: /en/insights/vmware-security-advisory/ schema: /nerd/schema/posts.json markdown: /en/insights/vmware-security-advisory.mdspec: title: VMware Security Advisory date: 2024-09-18 author: daniel-stadelmann locale: en summary: >- Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale. capabilities: [security] vendors: [vmware] migrated: 2026-08-24 translationReviewed: false draft: false sections: - body: | Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible. - heading:

VMSA-2024-0019

body: | The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968). Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/).status: corpus: 315 alsoLike: - {ref: posts/vmware-security-advisory-vmsa-2024-0012, score: 1.00} - {ref: posts/vmware-security-advisory-vmsa-2022-0030, score: 1.00} - {ref: solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance, score: 0.70} search: /en/search.json
{ "apiVersion": "soultec.ch/v1", "kind": "Post", "metadata": { "name": "vmware-security-advisory", "locale": "en", "labels": { "author": "daniel-stadelmann", "capability/security": 1.91, "vendor/vmware": 0.98 }, "annotations": { "source": "blog-content/posts/en/vmware-security-advisory.md", "route": "/en/insights/vmware-security-advisory/", "schema": "/nerd/schema/posts.json", "markdown": "/en/insights/vmware-security-advisory.md" } }, "spec": { "title": "VMware Security Advisory", "date": "2024-09-18", "author": "daniel-stadelmann", "locale": "en", "summary": "Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.", "capabilities": [ "security" ], "vendors": [ "vmware" ], "migrated": "2026-08-24", "translationReviewed": false, "draft": false, "sections": [ { "body": "Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible." }, { "heading": "

VMSA-2024-0019

",
"body": "The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).\n\nBroadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/)." } ] }, "status": { "corpus": 315, "alsoLike": [ { "ref": "posts/vmware-security-advisory-vmsa-2024-0012", "score": "1.00" }, { "ref": "posts/vmware-security-advisory-vmsa-2022-0030", "score": "1.00" }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", "score": "0.70" } ], "search": "/en/search.json" }}
apiVersion = "soultec.ch/v1"kind = "Post"[metadata]name = "vmware-security-advisory"locale = "en"[metadata.labels]author = "daniel-stadelmann""capability/security" = 1.91"vendor/vmware" = 0.98[metadata.annotations]source = "blog-content/posts/en/vmware-security-advisory.md"route = "/en/insights/vmware-security-advisory/"schema = "/nerd/schema/posts.json"markdown = "/en/insights/vmware-security-advisory.md"[spec]title = "VMware Security Advisory"date = 2024-09-18author = "daniel-stadelmann"locale = "en"summary = "Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale."capabilities = ["security"]vendors = ["vmware"]migrated = 2026-08-24translationReviewed = falsedraft = false[[spec.sections]]body = "Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible."[[spec.sections]]heading = "

VMSA-2024-0019

"
body = '''The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/).'''[status]corpus = 315search = "/en/search.json"[[status.alsoLike]]ref = "posts/vmware-security-advisory-vmsa-2024-0012"score = "1.00"[[status.alsoLike]]ref = "posts/vmware-security-advisory-vmsa-2022-0030"score = "1.00"[[status.alsoLike]]ref = "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance"score = "0.70"
<?xml version="1.0" encoding="UTF-8"?><manifest kind="Post"> <apiVersion>soultec.ch/v1</apiVersion> <metadata> <name>vmware-security-advisory</name> <locale>en</locale> <labels> <author>daniel-stadelmann</author> <entry key="capability/security">1.91</entry> <entry key="vendor/vmware">0.98</entry> </labels> <annotations> <source>blog-content/posts/en/vmware-security-advisory.md</source> <route>/en/insights/vmware-security-advisory/</route> <schema>/nerd/schema/posts.json</schema> <markdown>/en/insights/vmware-security-advisory.md</markdown> </annotations> </metadata> <spec> <title>VMware Security Advisory</title> <date>2024-09-18</date> <author>daniel-stadelmann</author> <locale>en</locale> <summary>Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.</summary> <capabilities> <item>security</item> </capabilities> <vendors> <item>vmware</item> </vendors> <migrated>2026-08-24</migrated> <translationReviewed>false</translationReviewed> <draft>false</draft> <sections> <section> <body>Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.</body> </section> <section> <heading>

VMSA-2024-0019

</heading>
<body>The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/). </body> </section> </sections> </spec> <status> <corpus>315</corpus> <alsoLike> <item> <ref>posts/vmware-security-advisory-vmsa-2024-0012</ref> <score>1.00</score> </item> <item> <ref>posts/vmware-security-advisory-vmsa-2022-0030</ref> <score>1.00</score> </item> <item> <ref>solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance</ref> <score>0.70</score> </item> </alsoLike> <search>/en/search.json</search> </status></manifest>
# Code generated by the soultec.ch build. DO NOT EDIT.import jsonPAGE = { "apiVersion": "soultec.ch/v1", "kind": "Post", "metadata": { "name": "vmware-security-advisory", "locale": "en", "labels": { "author": "daniel-stadelmann", "capability/security": 1.91, "vendor/vmware": 0.98, }, "annotations": { "source": "blog-content/posts/en/vmware-security-advisory.md", "route": "/en/insights/vmware-security-advisory/", "schema": "/nerd/schema/posts.json", "markdown": "/en/insights/vmware-security-advisory.md", }, }, "spec": { "title": "VMware Security Advisory", "date": "2024-09-18", "author": "daniel-stadelmann", "locale": "en", "summary": "Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.", "capabilities": ["security"], "vendors": ["vmware"], "migrated": "2026-08-24", "translationReviewed": False, "draft": False, "sections": [ { "body": "Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.", }, { "heading": "

VMSA-2024-0019

",
"body": ( "The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).\n" "\n" "Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/)." ), }, ], }, "status": { "corpus": 315, "alsoLike": [ { "ref": "posts/vmware-security-advisory-vmsa-2024-0012", "score": "1.00", }, { "ref": "posts/vmware-security-advisory-vmsa-2022-0030", "score": "1.00", }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", "score": "0.70", }, ], "search": "/en/search.json", },}if __name__ == "__main__": print(json.dumps(PAGE, indent=2, ensure_ascii=False))
# Code generated by the soultec.ch build. DO NOT EDIT.$Page = [ordered]@{ apiVersion = 'soultec.ch/v1' kind = 'Post' metadata = [ordered]@{ name = 'vmware-security-advisory' locale = 'en' labels = [ordered]@{ author = 'daniel-stadelmann' 'capability/security' = 1.91 'vendor/vmware' = 0.98 } annotations = [ordered]@{ source = 'blog-content/posts/en/vmware-security-advisory.md' route = '/en/insights/vmware-security-advisory/' schema = '/nerd/schema/posts.json' markdown = '/en/insights/vmware-security-advisory.md' } } spec = [ordered]@{ title = 'VMware Security Advisory' date = '2024-09-18' author = 'daniel-stadelmann' locale = 'en' summary = 'Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.' capabilities = @('security') vendors = @('vmware') migrated = '2026-08-24' translationReviewed = $false draft = $false sections = @( [ordered]@{ body = 'Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.' } [ordered]@{ heading = '

VMSA-2024-0019

'
body = @'The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/).'@ } ) } status = [ordered]@{ corpus = 315 alsoLike = @( [ordered]@{ ref = 'posts/vmware-security-advisory-vmsa-2024-0012' score = '1.00' } [ordered]@{ ref = 'posts/vmware-security-advisory-vmsa-2022-0030' score = '1.00' } [ordered]@{ ref = 'solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance' score = '0.70' } ) search = '/en/search.json' }}$Page | ConvertTo-Json -Depth 32
// Code generated by the soultec.ch build. DO NOT EDIT.package mainimport ( "encoding/json" "os")var page = map[string]any{ "apiVersion": "soultec.ch/v1", "kind": "Post", "metadata": map[string]any{ "name": "vmware-security-advisory", "locale": "en", "labels": map[string]any{ "author": "daniel-stadelmann", "capability/security": 1.91, "vendor/vmware": 0.98, }, "annotations": map[string]any{ "source": "blog-content/posts/en/vmware-security-advisory.md", "route": "/en/insights/vmware-security-advisory/", "schema": "/nerd/schema/posts.json", "markdown": "/en/insights/vmware-security-advisory.md", }, }, "spec": map[string]any{ "title": "VMware Security Advisory", "date": "2024-09-18", "author": "daniel-stadelmann", "locale": "en", "summary": "Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.", "capabilities": []any{"security"}, "vendors": []any{"vmware"}, "migrated": "2026-08-24", "translationReviewed": false, "draft": false, "sections": []any{ map[string]any{ "body": "Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.", }, map[string]any{ "heading": "

VMSA-2024-0019

",
"body": "The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).\n" + "\n" + "Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/).", }, }, }, "status": map[string]any{ "corpus": 315, "alsoLike": []any{ map[string]any{ "ref": "posts/vmware-security-advisory-vmsa-2024-0012", "score": "1.00", }, map[string]any{ "ref": "posts/vmware-security-advisory-vmsa-2022-0030", "score": "1.00", }, map[string]any{ "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", "score": "0.70", }, }, "search": "/en/search.json", },}func main() { enc := json.NewEncoder(os.Stdout) enc.SetEscapeHTML(false) enc.SetIndent("", " ") if err := enc.Encode(page); err != nil { os.Exit(1) }}
// Code generated by the soultec.ch build. DO NOT EDIT.const page = { apiVersion: "soultec.ch/v1", kind: "Post", metadata: { name: "vmware-security-advisory", locale: "en", labels: { author: "daniel-stadelmann", "capability/security": 1.91, "vendor/vmware": 0.98, }, annotations: { source: "blog-content/posts/en/vmware-security-advisory.md", route: "/en/insights/vmware-security-advisory/", schema: "/nerd/schema/posts.json", markdown: "/en/insights/vmware-security-advisory.md", }, }, spec: { title: "VMware Security Advisory", date: "2024-09-18", author: "daniel-stadelmann", locale: "en", summary: "Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.", capabilities: ["security"], vendors: ["vmware"], migrated: "2026-08-24", translationReviewed: false, draft: false, sections: [ { body: "Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.", }, { heading: "

VMSA-2024-0019

",
body: "The published vulnerability ([CVE-2024-38812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38812)) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one ([CVE-2024-38813](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38813)) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at [Broadcom](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968).\n" + "\n" + "Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, [we are glad to help](https://soultec.ch/contact-us/).", }, ], }, status: { corpus: 315, alsoLike: [ { ref: "posts/vmware-security-advisory-vmsa-2024-0012", score: "1.00", }, { ref: "posts/vmware-security-advisory-vmsa-2022-0030", score: "1.00", }, { ref: "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", score: "0.70", }, ], search: "/en/search.json", },};console.log(JSON.stringify(page, null, 2));

# 42 lines · YAML · validated at build# 62 lines · JSON · validated at build# 56 lines · TOML · validated at build# 66 lines · XML · validated at build# 68 lines · Python · read back at build, equals the JSON record# 65 lines · PowerShell · read back at build, equals the JSON record# 78 lines · Go · read back at build, equals the JSON record# 63 lines · JavaScript · read back at build, equals the JSON record · served at /en/insights/vmware-security-advisory.md

Post · 2024-09-18

VMware Security Advisory

Broadcom has disclosed a new vulnerability, covered by VMware Security Advisory 2024-0019. The issues are rated 7.5 to 9.8 on the CVSS scale.

2024-09-18Date
Daniel StadelmannAuthor
1Min read
Vendors VMware 0.98

Broadcom has disclosed a new vulnerability. It is covered by VMware Security Advisory 2024-0019 and the issues are rated 7.5 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be closed with the available update as soon as possible.

VMSA-2024-0019

The published vulnerability (CVE-2024-38812) lets an attacker with network access to the vCenter appliance perform remote code execution. The second one (CVE-2024-38813) lets an attacker with network access to the vCenter appliance obtain root rights through privilege escalation. Only vCenter is affected. Further detail and the fixed version are at Broadcom.

Broadcom reports no known attacks so far. With the vulnerabilities now published that can change within hours. Both soulTec and Broadcom recommend patching the affected systems immediately. If you need a hand, we are glad to help.

You might also like