CVE-2017-4931

Опубликовано: 16 нояб. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.

Ссылки

http://www.securityfocus.com/bid/101772
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039750
Third Party Advisory
VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101772
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039750
Third Party Advisory
VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*

Версия от 9.0.0 (включая) до 9.2.0 (исключая)

EPSS

Процентиль: 44%

0.00217

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-cfcx-vfw6-mfjv