All Products: How To Report a Vulnerability in VMware Carbon Black Products

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black EDR (formerly Cb Response)
• Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

How to report a vulnerability in VMware Carbon Black products

Environment

• All VMware Carbon Black Products

Resolution

1. Confirm the vulnerability is not already in VMware Security Advisories
2. Open a support case, include the following information (if not applicable, provide what is)
   • CVE Number
   • Security Scanner Used and Result Info
   • Steps of reproduction
   • Any additional info to help understand the issue reported.
   • Product Version
3. Follow up with the issue by subscribing to VMware Security Advisories

Additional Information

For additional questions regarding the vulnerability after the case has closed, reach out to VMware Security Response Center