VMware fixes command injection, file upload flaws in Carbon Black security tool

Miscreants can exploit these to make a bad situation much worse

VMware has patched two security flaws, an OS command injection vulnerability and a file upload hole, in its Carbon Black App Control security product running on Windows....