Fixing an invalid vCenter STS certificate while using ‘cmsso-util’

During an issue I had with my lab environment while using the ‘cmsso-util’ command to join two of my lab vCenters to the same SSO domain, I also had another issue which I will talk about in this blog post. Once I fixed the previous issue, which was due to …

Chicken and Egg problem with “cmsso-util domain-repoint” on vCenter

Today I came across a funny little issue on my lab environment. I was trying to use the “cmsso-util” tooling to play around and joining my second lab vCenter to the first vCenter Servers SSO Domain. You can read the following VMware piece of documentation if you want to know …

VMSA-2020-0006 / CVE-2020-3952 Demo PoC

The 14th of April I wrote about the recently released VMware Security Advisory (VMSA) VMSA-2020-0006 also known under its CVE name by CVE-2020-3952. At the time of writing that blogpost there weren’t any Proof of Concepts (PoC’s) available to show us what kind of information could be obtained through abusing …

Security update: VMSA-2020-0006 / CVE-2020-3952

The 9th of April VMware issued a new VMware Security Advisory (VMSA) VMSA-2020-0006. This Security Advisory discusses CVE-2020-3952 in length. The vulnerability received a CVSSv3 score of 10 out of 10. Which means this is a very serious security issue. This also means you should patch your vCenter Server environment …