VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in-the-middle network positioning between vCenter server and the virtual machine may be able to bypass SAML token signature verification, to perform VMware Tools Guest Operations