Threat actors could retrieve valid usernames from VMware by exploiting vulnerabilities

Threat actors could retrieve valid usernames from VMware by exploiting vulnerabilities

Three new vulnerabilities have been found in critical VMware products, including two that could be used to recover usernames. The trio of holes, two of which were found by the US National Security Agency (NSA), were divulged Monday and tagged “Important” in terms of severity. Patches are available to plug all three. “Organizations that delay patching face increased incident risk,” said Ed Dubrovsky, chief operating officer of incident response f…