Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module (VSM) to become inaccessible to users through the CLI.

The vulnerability is due to improper resource allocation during failed CLI login attempts when login parameters that are part of the Secure Login Enhancements capability are configured on an affected device. An attacker could exploit this vulnerability by performing a high amount of login attempts against the affected device. A successful exploit could cause the affected device to become inaccessible to other users, resulting in a denial of service (DoS) condition requiring a manual power cycle of the VSM to recover.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-nexus-1000v-dos

This advisory is part of the February 2020 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication, which includes six Cisco Security Advisories that describe six vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: February 2020 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication.

Security Impact Rating: High

CVE: CVE-2020-3168

Related:

Digital Asset raises $35m

The latest financing round brings the total amount raised by Digital Asset since its establishment in 2014 to $150 million.

The funds will be used to accelerate the adoption of DAML across multiple industries, expand the number and variety of DAML-enabled partner products and fund new products designed to enhance the DAML developer experience, specifically project:DABL, a cloud-based prototyping and production environment for DAML applications.

“DAML allows you to focus only on what you need to do to differentiate your product and eliminate the complexity that doesn’t provide value to your organization,” said Yuval Rooz, co-founder and CEO of Digital Asset. “Ninety percent of development time is wasted on undifferentiated work. With this new funding we will go further on this mission to focus on the 10 percent value-add by providing a world class smart contract experience regardless of where your application runs.”

DAML is a next-generation smart contract language that Digital Asset open sourced earlier this year. It is used to create smart contracts, or computer programs that automate business processes and digitally facilitate, verify, and enforce agreements between two or more entities.

Digital Asset provides commercial integrations of DAML with partner platforms to enable a variety of organizations – from the largest enterprises to technology start-ups – to develop secure, sophisticated, compliant, and operationally solid applications faster and deploy them to any ledger. In April, the company announced a partnership with VMware to integrate DAML with VMware Blockchain. Subsequently, further integrations with Hyperledger Sawtooth, Hyperledger Fabric, Corda, and Amazon’s QLDB and Aurora databases have been announced.

“We’re delighted by our investors’ ongoing commitment to helping Digital Asset succeed and achieve its vision,” said Emnet Rios, CFO and COO of Digital Asset. “This new funding will allow us to further expand our support for DAML-enabled platforms, build on the momentum we’ve seen behind DAML worldwide, and serve a growing client base across multiple industries.”

Related:

Tech Q&A: Here’s how to upgrade a Mac to Windows 10

There’s only one catch. Beginning with the new version of Windows 10 that Microsoft released in May, Mac users discovered that older versions of VMware Fusion couldn’t handle the Windows upgrade. They had to upgrade to Fusion version 11.1 to get that capability. (VMware now offers an even newer upgrade to Fusion, version 11.5, for $50. See tinyurl.com/y6nzaaa8). The website also lists the Mac requirements for using Fusion 11.5, which include using macOS 10.13 (High Sierra), 10.14 (Mojave) or 10.15 (Catalina).

Related:

  • No Related Posts

PowerEdge & Microsoft: Better Together at Microsoft Ignite 2019

This is a big year for the Microsoft community with two of the most ubiquitous platforms – Microsoft Windows Server 2008 and SQL Server 2008 going End of Support. That’s sure to be a hot topic at Ignite 2019 next week (November 4-8) in Orlando, Florida.

If you’ve visited Dell Technologies at a trade show, attended a roadshow, or even listened to one of our webinars throughout the year, you’ve seen our Real Transformation booth. There’s never been a clearer “this just got REAL” moment like facing an End of Support event. So we’re taking that theme to the “House of the Mouse” and looking forward to some engaging discussions.

Dell EMC and Microsoft have been partners for more than three decades, and today we’re doing more exciting work together than ever before. That’s in part due to the fact that the challenges for our customers have never been greater. And that gives us a chance to bring more than just world-class infrastructure to the market by offering solutions combining the best in hardware, software, services and management tools to address those complex challenges.

Dell’s partnership with Microsoft goes back more than thirty years during which time we’ve co-developed innovative hardware and software solutions with the goal of simplifying IT for our customers. Never has this been more important than today where hybrid cloud, AI and hyper-converged infrastructure are making it even more challenging for organizations to keep pace with change. Looking ahead to the release of Microsoft SQL Server 2019, we have been testing early versions of the software and the results are amazing. On the latest generation of Dell EMC PowerEdge Servers, we’ve seen upwards of 2.7x transaction processing speed. 1 This is an early indication of the power of our platforms and the strength of our partnership with Microsoft. We are looking forward to a very engaging Ignite and hope you will come speak with us at the event! – Chad Fenner, Senior Director, PowerEdge Product Management

From a PowerEdge perspective, we have plenty of cool things up our sleeve that we’re excited to share with you. I don’t want to spoil the fun, but here’s a preview of what’s happening with PowerEdge at Ignite:

Dell Technologies Booth # 1547

If you’re in Orlando, come see us in the Dell Technologies booth! We’ll have experts ready to answer all of your End of Support questions, in-booth theater presentations, and some cool giveaways. We’ll have some of our new hardware including the PowerEdge MX that you can open, explore, and even swap some components. We’ll be running a demo of our OpenManage integration with Windows Admin Center and some live diagnostics on the PowerEdge R740xd. Yes, we know this is a cloud and software show, but we like to throw in a subtle reminder that all this modern software needs the best2 in modern hardware.

There are some fun interactive ways to learn more about our joint PowerEdge and Microsoft solutions. Highlights include:

OpenManage Monster Hunter, sponsored by KIOXIA – Halloween may be the week before but that doesn’t mean the fun has to end. In this game you’ll fight zombies and bats to modernize your datacenter. You’ll work your way through our OpenManage Integration with Windows Admin Center on AzureStack HCI, integration with Microsoft System Center, and OpenManage Enterprise on the PowerEdge MX. There will be a leaderboard, and some excellent prizes, so challenge your friends.

Tech Trivia – This Jeopardy! style game will help you learn more about the entirety of the Dell Technologies portfolio – from servers to storage to services. Of course, that also includes our full line of laptops and gaming hardware. Play Tech Trivia and you’ll be entered into a raffle to win a Ring Doorbell.

Dell Technologies Scavenger Hunt – Engage, learn and become more social with our Dell Technologies booth, solutions and activities. Dust off your hashtags and earn stamps, make sure you redeem your card in the booth for fantastic daily prizes including a GoPro HERO7 and a grand prize drawing on Thursday for a set of BOSE noise-cancelling headphones.

RHEL Button Contest – Grab a button, pin it on, snap a creative pic somewhere at the event and post to Instagram with the hashtag #SQLonRHELonDell. First place DAILY winners will receive a 2-in-1 Dell Inspiron laptop.

Breakout Sessions

PowerEdge will be represented in the following breakout sessions:

It’s all about the data: Abstraction beyond virtualization

Speaker: Stephen McMaster, Engineering Technologist, Dell EMC

Wednesday, November 06, 10:55 AM in Theatre 7

In the data driven age, information is as valuable as currency. Only when you can harness data from multiple sources and formats can you accelerate business innovation. Containerization enables agility at hyperscale and is a critical step towards achieving true data abstraction beyond just virtualization. Join us to learn how Dell EMC delivers foundational solutions to support Microsoft SQL Server 2019, including big data clusters, enabling businesses to take advantage of next-generation analytics, and go behind their data to draw valuable insights.

There is a new era in data management – Dell Technologies makes data innovation a reality

Speaker: Stephen McMaster, Engineering Technologist, Dell EMC

Thursday November 07, 10:15 AM in OCCC West

There are many paths towards modernizing the Microsoft Data Estate. Designing the right solution that meets today’s needs while laying the foundation for where your business will need to be tomorrow is a critical step in becoming an innovation leader. Join us as we outline the modernization strategies organizations need to consider in this new era of data abstraction and how Dell Technologies can guide you on this journey.

Evening Events

The fun doesn’t stop when the show floor closes. We have a great line-up of invitation-only events for our customers and those who want to learn more about Dell Technologies solutions.

Customer Appreciation Celebration at the Andretti Racing Center

We love our customers and the chance to celebrate with them! So rev up your engines for this fast-paced racing experience on November 6 at 6:30pm at Andretti Indoor Karting and Games. This event is by invite-only and will likely reach capacity so please reach out to your account team for more information to register.

Dell Technologies Hospitality Suite – Monday/Tuesday/Wednesday

Relax in the Dell Tech Hospitality suite – complete with food, beverages, and a place to unwind. Open Monday – Wednesday, this suite will give you the opportunity to learn from Dell Technologies, Red Hat, and Intel experts while recharging yourself (and your phone if it needs some charging too). Registration is required.

SQL Server 2019 Conversations and Cocktails – Tuesday November 5 4:00-6:30

Connect with your peers at this informal gathering of like-minded SQL Server connoisseurs to share the technical pitfalls, gotchas and successes learned. Share a beverage, enjoy hors d’oeuvres and meet the experts from Dell Technologies, Intel and Red Hat who are ready to answer your questions and better arm you to take your business further, faster. This exclusive celebration will take place at the Oceanaire Seafood Room and is available by registration only, until full, here:

If you’re running an End of Support platform or one that will be soon, come talk to us. We make modernizing easy and can get you back on a supported platform and can even help you transform the way you look at IT.

We look forward to seeing you next week at Ignite!

To learn more about PowerEdge, visit dellemc.com/servers, or join the conversation on Twitter @DellEMCservers.

[1] IDC WW Quarterly x86 Server Tracker, 2018Q4, Mar. 6, 2019 – Units & Vendor Revenue

[2] Persistent Memory Performance in vSphere 6.7 with Intel Optane DC Persistent Memory – VMware, April 2019

Related:

PowerEdge & VMware: Better Together at VMworld 2019

This year, there are tons of new and exciting things to look forward to at VMworld US – and not just the new location. While we’re all excited to take a selfie with the Golden Gate bridge and see the home from Full House (oh that’s just me?) the real excitement of the week lies in the latest technology and innovation, networking, and learning that will permeate the Moscone Center in San Francisco August 25-29th.

Dell EMC and VMware have partnered for over 17 years, and today we’re doing more exciting work together than ever before. VMworld is always a highlight for us, because we get to see so many of our customers and partners face-to-face. We love to interact directly, hear feedback, answer questions, showcase our joint solutions and preview the new products and solutions that are coming soon.

As industry leaders in servers[1], virtualization[2], and HCI software[3], Dell EMC and VMware continuously work together to develop new joint solutions that enable our customers to efficiently reach their business objectives. There is always something new and exciting to highlight, and VMworld 2019 is no exception.

From a PowerEdge perspective, we have plenty of cool things up our sleeve that we’re excited to share with you. I don’t want to spoil the fun, but here’s a preview of what’s happening with PowerEdge at VMworld:

Breakout Sessions

PowerEdge will be represented in the following breakout sessions:

Power Composable Hybrid Cloud with VMware Cloud Foundation on PowerEdge MX

Speakers: Shanthala Gorur Ashwath, Senior Product Manager – Cloud Foundation VMware and Roger Foreman, Sr. Product Manager, Dell EMC

Monday, August 26, 02:30 PM – 03:30 PM

In this talk, we will detail how VMware Cloud Foundation made it possible to take advantage of the PowerEdge MX composable platform to provide on-demand allocations of physical resources for workload domains. Composable infrastructure is an exciting new area where customers have the flexibility to create their own purpose-built infrastructure on the fly, leading to greater fluidity in resource allocation and usage. In this session, you will learn how to reduce CapEx and OpEx through quicker deployments and application provisioning through automation, and how to utilize the flexibility and agility provided by the PowerEdge MX platform’s kinetic infrastructure to run virtualized workloads in a hybrid cloud environment. We will also go on a technical deep dive of this joint solution between VMware Cloud Foundation and the Dell MX platform.

Take IT to the track!! Self-Driving Datacenter, seatbelts required!

Speakers: Aaron Chaisson, Vice President Portfolio Messaging, Dell Technologies & Brian Lewis, Director VMware Portfolio Messaging, Dell Technologies

Tuesday, Aug. 27, 11:00 AM –12:00 PM

With a demo intensive experience, come see an insider’s look at the product innovations from Dell Technologies expansive portfolio of hardware, software and solutions that make the self-driving, software defined datacenter a reality. See our latest innovations and learn how we dramatically simplify and power more VMware deployments than anyone else through deeply integrated servers, storage, networking, data protection, converged and hyper-converged systems and vertically integrated cloud platforms built to deliver you the automated IT experience you desire, from the edge to the cloud, and anywhere in between.

Dell Technologies Booth # 1027

If you’re here in San Francisco, come see us in the Dell Technologies booth! We’ll have experts ready to talk and answer questions, in-booth theater presentations and a PowerEdge MX on display. Yes, we know this is a software show, but we like to throw in a subtle reminder that all this cool software runs on hardware. Plus, everyone seems to love the chance to see and touch a real live server – and the PowerEdge MX740C doesn’t disappoint.

We’ll also have demos of the latest cloud solutions on PowerEdge infrastructure and management system advances with OpenManage. This is fantastic opportunity to learn more about our joint PowerEdge and VMware solutions and align on your workload strategy. Highlights include:

VMware Cloud Foundation for PowerEdge MX – Wondering how to make hybrid cloud work for you? Leverage the industry’s most advanced hybrid cloud platform, VMware® Cloud Foundation™, to drive a consistent, simple experience with a single operating environment across multiple clouds. Based on VMware technologies including vSphere (compute), vSAN (storage), NSX (networking and security), and vRealize® Suite (cloud management), Cloud Foundation delivers enterprise-ready services for both traditional and containerized apps – in private or hybrid cloud environments.

PowerEdge and VMware vSphere – We’re introducing an easy button for PowerEdge and vSphere! Soon the entire PowerEdge server portfolio will be available with vSphere Standard preinstalled and the license pre-activated straight from the factory. This new offer is unique to Dell EMC and saves customers up to 40 minutes per server for deployment and up to 67% fewer steps for activation and installation of vSphere[4].

OpenManage Integration for VMware vCenter (OMIVV) – OMIVV allows you to configure, deploy, update and monitor Dell PowerEdge servers — all within your vCenter console. Swing by the booth to see a demo and find out what new features will be available in OMIVV v5.

vSAN Ready Nodes – Dell EMC vSAN Ready Nodes built on Dell EMC PowerEdge servers have been pre-configured, tested, and certified to run VMware vSAN. Each Ready Node includes just the right amount of CPU, memory, network I/O controllers, HDDs, and SSDs that are best suited for vSAN. We’ll have demos and presentations and experts on hand to answer questions.

Booth Presentations

There will also be several presentations at the booth to highlight PowerEdge & VMware joint solutions:

Monday @ 5:30 pm – Managing VMware VCenter Environments with OpenManage

Tuesday @ 11:30 am – vSAN Ready Nodes

Wednesday @ 3:45 – Dynamic Storage Provisioning with VMware VCF and PowerEdge MX

Exclusive Technology Preview

PowerEdge & AMD will host a Technology Exclusive Preview event at 6:30 pm Tuesday evening. This event requires an invitation, VMworld event badge and signed NDA to attend. If you have a signed NDA and would like to join, please stop by our booth #1027 for more details and an invitation. You won’t be disappointed.

Customer Appreciation Celebration

We love our customers and the chance to celebrate with them! We’re hosting a customer appreciation event following the Exclusive Technology Preview at Waterbar Tuesday evening from 8-10 pm. Stop by our booth #1027 for an invitation and join us for good food, drinks and conversation (VMware badge and invitation are required for this event, but NDA is not).

PowerEdge and VMware work together to help you simplify your IT and prepare you to meet changing workload demands – both for today and the future. With over 1800 VMware-certified Dell EMC support professionals, one call can handle almost all your support issues.

To learn more about PowerEdge and VMware Solutions, visit our new solutions page.

Hope everyone has a great and productive week at VMworld! Rest up, and we’ll see you again at VMworld Europe in November!

To learn more about PowerEdge, visit dellemc.com/servers, or join the conversation on Twitter @DellEMCservers.

[1] IDC WW Quarterly x86 Server Tracker, 2018Q4, Mar. 6, 2019 – Units & Vendor Revenue

[2] Network World, Feb. 20, 2019

[3] IDC WW Quarterly Converged Systems Tracker, 2018, Q4, April 4, 2019 – Vendor Revenue

[4] Only applicable to new customers and based on internal VMware comparison of the typical vSphere installation and activation process as compared to the situation when vSphere is preinstalled and pre-activated at the factory. Typical installation and activation requires 9 steps, while the preinstalled and pre-activated process requires 3 steps.

Related:

VM's Power State Does Not Update And Shows As “Unknown” After vCenter Server Reboots

This is an issue with Citrix hypervisor communication library plugin since version Xenapp/XenDesktop version 7.16.

When vCenter server goes alive after reboot i.e “https://<vCenter FQDN>/sdk” becomes accessible, BrokerHostingPlugin still fails to login the vCenter server with exception “The session is not authenticated.”.

CDF Traces from Delivery Controller

,BrokerHostingPlugin,,0,,1,Information,”Attempting connection”,””

,BrokerHostingPlugin,,0,,1,Information,”***** Get Hypervisor Certificate for Connection to ‘https://<vCenter FQDN>/sdk​​​​​​​’ *****”,””

,BrokerHostingPlugin,,0,,1,Information,”Certificate is untrusted: False”,””

,BrokerHostingPlugin,,0,,1,Information,”Time elapsed to get the hypervisor certificate: xxms”,””

,BrokerHostingPlugin,,0,,1,Information,”***** Login Connection – 0 to ‘​​​​​​​https://<vCenter FQDN>/sdk’ as ‘#login_name#‘ *****”,””

,BrokerHostingPlugin,,0,,1,Information,”VMware plugin initialisation times: create service xms, content time xxxms, total xxxms”,””

,BrokerHostingPlugin,,0,,1,Information,”Connected to ‘VMware vCenter Server #vCenter version info#’“,””

,BrokerHostingPlugin,,0,,1,Error,”System.Web.Services.Protocols.SoapException: The session is not authenticated.

,BrokerHostingPlugin,,0,,1,Information,”Connection attempt threw exception System.Web.Services.Protocols.SoapException: The session is not authenticated.

,BrokerHostingPlugin,,0,,1,Information,”Connection is still down”,””

,BrokerHostingPlugin,,0,,1,Information,”Sleeping for 00:00:30 before trying to reconnect again”,””

Related:

New Version 10.7.1-6 SMG only for Scanners – Download Error

I need a solution

Dear,

Today the new version 10.7.1-6 is available for download only for the smg  scanner , the version of the control center is manteince in 10.7.0-5.

The release notes of this new version https://support.symantec.com/us/en/article.doc11460.html this version is for select hardware and VMWare version , in my case the environment is virtual.

The other point is the message of “Download Error” in all the scanner, anyone can dowload and intall this new version for all component (Control Center and Scanners)

Regars

Miguel Angel

0

Related:

  • No Related Posts

IBM CTO: ‘Open Tech Is Our Cloud Strategy’

IBM CTO: ‘Open Tech Is Our Cloud Strategy’IBM CTO: ‘Open Tech Is Our Cloud Strategy’
Jessica Lyons HardcastleJessica Lyons Hardcastle
Jessica Lyons HardcastleJuly 3, 2019

9:47 am MT

IBM may not be as splashy as some of the other tech giants that make big code contributions to open source. But as Chris Ferris, CTO for open technology at IBM says, “we’ve been involved in open source before open source was cool.”

By Ferris’ estimation, IBM ranks among the top three contributors in terms of code commits to open source project and contributors to the various open source communities. “It’s really significant,” he said. “We don’t run around with the vanity metrics the way some others do, but it’s really important to us.”

Ferris can’t quantify IBM’s open source investments. But think about all the different foundations of which IBM is a sponsor, he says. These include the Linux Foundation, Apache Software Foundation, Eclipse Foundation, Open Compute Project, OpenStack Foundation, and Cloud Native Computing Foundation (CNCF), among others.

IBM CTO Chris Ferris

IBM CTO Chris Ferris

“Most of the time we are a top-level sponsor, so that’s typically a quarter-million [dollars] a year. Plus all the contributions of engineers to those like CNCF, Kubernetes, and Hyperledger. You add it all up and we probably have as much, if not more, contributions into open source as any of the other leaders. We think it’s vitally important to our success and our strategy.”

And then there’s the company’s pending $34 billion Red Hat acquisition. The move illustrates the importance of open source to IBM’s cloud strategy — “open technology isthe cloud strategy,” Ferris said — but it began way before this purchase.

“If I unwind the stack to the virtualization wars where we were all focused on data center virtualization and VMware seemed to be winning that particular battle, everyone was trying to get in the game,” he said. At the time, IBM had six virtualization products that weren’t interoperable, and that was “very confusing to IBM and our customers.” The company needed to figure out how to put itself in a position to compete against VMware “and we chose OpenStack for that. Rather than spend multiple years trying to smush together six solutions, we felt the best way was to embrace an emerging open source community.”

The company worked with Hewlett Packard, AT&T, and others to make the case for open governance of OpenStack software to co-founder Rackspace. “And then we embraced that for our own private cloud approach,” Ferris said.

Cloud Native and Blockchain

IBM also worked with Google, Docker, Red Hat, and others to launch CNCF to provide open governance for Kubernetes, which has since become the foundation for IBM’s private cloud. More recently it worked with many of those same companies on the Istio project, which is a service mesh management platform. And it also worked closely with Google on Knative, which uses Kubernetes as a bridge between enterprises and serverless deployments. While this and other cloud-native open source projects that IBM contributes to are still in their infancy among enterprise users, “a year-plus down the road, these projects will be very important.”

In addition to these cloud native technologies, IBM worked with the Linux Foundation to establish Hyperledger, contributing 44,000 lines of code and establishing the blockchain group’s first project: Hyperledger Fabric.

The reason for IBM’s commitment to open source is two-fold. “One of the reasons is that’s what our customers are looking for,” Ferris said. “They don’t want to be locked into any one vendor, they want interoperability and affordability, and the way to do that is through open technology.”

The second reason, he said, is that “we do firmly believe it leads to a better outcome. We’re able to innovate more quickly than if we were trying to compete with the rest of the world on our own. We benefit from the ideas of the broader communities and we’re able to contribute to those as well.”

Related: