CVE-2017-4951

Опубликовано: 29 янв. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices.

Ссылки

http://www.securityfocus.com/bid/102849
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040288
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0006.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102849
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040288
Third Party Advisory
VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0006.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*

Версия от 9.1 (включая) до 9.1.5 (исключая)

cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*

Версия от 9.2 (включая) до 9.2.2 (исключая)

EPSS

Процентиль: 40%

0.0018

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-97q6-87j9-jw23