PT-2018-17848 · Vmware · Vmware Airwatch Agent For Windows Mobile+1

Publicado 2018-06-11 · Atualizado 2019-10-03 · CVE-2018-6968

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware AirWatch Agent for Android versions prior to 8.2 VMware AirWatch Agent for Windows Mobile versions prior to 6.5.2

Description The issue concerns a remote code execution vulnerability in the real-time File Manager capabilities. This may allow unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories, such as those on the SD card, by a malicious administrator.

Recommendations For VMware AirWatch Agent for Android versions prior to 8.2, update to version 8.2 or later to resolve the issue. For VMware AirWatch Agent for Windows Mobile versions prior to 6.5.2, update to version 6.5.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-6968

Produtos afetados

Vmware Airwatch Agent For Android

Vmware Airwatch Agent For Windows Mobile

Referências · 5

• http://securitytracker.com/id/1041060 · Nota
• https://osv.dev/vulnerability/CVE-2018-6968 · Aviso do Fabricante
• http://vmware.com/security/advisories/VMSA-2018-0015.html · Aviso do Fabricante
• http://securityfocus.com/bid/104441 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6968 · Nota de Segurança