CVE-2017-4932

Опубликовано: 16 нояб. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher UI context menu to native UI functionality and privilege. Successful exploitation of this issue could result in an escalation of privilege.

Ссылки

http://www.securityfocus.com/bid/101771
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039750
Third Party Advisory
VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101771
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039750
Third Party Advisory
VDB Entry
https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:vmware:airwatch_launcher:*:*:*:*:*:*:*:*

Версия до 3.2.2 (исключая)

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00124

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-wpgg-v2pr-g379