CVE-2018-6968

Опубликовано: 11 июн. 2018

Источник: nvd

CVSS3: 10

CVSS2: 7.5

EPSS Низкий

Описание

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such as those on the SD card by a malicious administrator.

Ссылки

http://www.securityfocus.com/bid/104441
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041060
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2018-0015.html
Vendor Advisory
http://www.securityfocus.com/bid/104441
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041060
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2018-0015.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:airwatch_agent:*:*:*:*:*:windows_mobile:*:*

Версия до 6.5.2 (исключая)

cpe:2.3:a:vmware:airwatch_agent:*:*:*:*:*:android:*:*

Версия до 8.2 (исключая)

EPSS

Процентиль: 93%

0.09505

Низкий

10 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-pf3f-28gw-f274