Half of all virtual appliances have outdated software and serious vulnerabilities

guest · Oct 13, 2020

Half of all virtual appliances have outdated software and serious vulnerabilities
New study shows that even security vendors can use outdated and vulnerable virtual appliances
October 13, 2020
https://www.csoonline.com/article/3...ted-software-and-serious-vulnerabilities.html

Virtual appliances are a popular way for software vendors to distribute their products to enterprise customers as they contain all the necessary pre-configured software stacks their applications need to function and can be deployed in public clouds or private data centers with ease.

Unfortunately, enterprises are at risk of deploying images that are vulnerable out-of-the-box according to a new study. It found that many vendors, including well-established ones, do a poor job of patching flaws and updating the software components in their virtual appliances.
Click to expand...

Few virtual appliances get good security grades
Orca Security, a cloud security company, scanned more than 2,200 virtual appliance images from 540 vendors that were being distributed through the public marketplaces of common cloud platforms including VMware, Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform.

In total, Orca's scanning identified 401,571 vulnerabilities across 2,218 appliances. The subsequent notification of affected vendors resulted in 287 products being updated and 53 being removed from distribution. Some vendors had products at both ends of the spectrum.
Click to expand...

Orca Security: Orca Security 2020 State of Virtual Appliance Security Report

Cloud adoption is a key driver for enterprise innovation. Virtual appliances are an inexpensive and relatively easy way for software vendors to distribute their wares for customers to deploy in public and private cloud environments. However, this report found that keeping software vendors’ virtual appliances patched and secured has fallen behind.

You can view the detailed research and scoring methodology along with the full table of results here.
Click to expand...

Log in or Sign up

Half of all virtual appliances have outdated software and serious vulnerabilities

guest Guest

Log in or Sign up

Half of all virtual appliances have outdated software and serious vulnerabilities

guest Guest

Useful Searches