PT-2017-16214 · Vmware · Vmware Airwatch Console

Publicado 2017-11-16 · Atualizado 2017-12-04 · CVE-2017-4931

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware AirWatch Console versions prior to 9.2.0

Description The issue allows an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation could result in an unsuspecting AWC user opening a CSV file that contains malicious content.

Recommendations For versions prior to 9.2.0, update to version 9.2.0 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-4931

Produtos afetados

Vmware Airwatch Console

Referências · 5

• https://vmware.com/us/security/advisories/VMSA-2017-0016.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-4931 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-4931 · Aviso do Fabricante
• http://securitytracker.com/id/1039750 · Nota
• http://securityfocus.com/bid/101772 · Nota