CVE-2016-7087

Опубликовано: 29 дек. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors.

Ссылки

http://www.securityfocus.com/bid/93455
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036972
http://www.vmware.com/security/advisories/VMSA-2016-0015.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93455
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036972
http://www.vmware.com/security/advisories/VMSA-2016-0015.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:horizon_view:5.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:5.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:5.3:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:6.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:6.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:6.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:horizon_view:7.0:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02949

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-ggqj-592h-fv2j