CVE-2016-7462

Опубликовано: 29 дек. 2016

Источник: nvd

CVSS3: 8.5

CVSS2: 7.5

EPSS Низкий

Описание

The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.

Ссылки

http://www.securityfocus.com/bid/94351
http://www.securitytracker.com/id/1037297
http://www.vmware.com/security/advisories/VMSA-2016-0020.html
Vendor Advisory
https://www.tenable.com/security/research/tra-2016-34
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/94351
http://www.securitytracker.com/id/1037297
http://www.vmware.com/security/advisories/VMSA-2016-0020.html
Vendor Advisory
https://www.tenable.com/security/research/tra-2016-34
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:vrealize_operations:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:6.2.0a:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:6.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01674

Низкий

8.5 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-v9q7-cmc5-22hj