VMware urges admins to remove deprecated, vulnerable auth plug-in

VMware urged admins today to remove a discontinued authentication plugin exposed to authentication relay and session hijack attacks in Windows domain environments via two security vulnerabilities left unpatched. [...]

attacks auth authentication domain environments exposed hijack plugin relay remove security session session hijack today unpatched vmware vulnerabilities vulnerable windows