CVE-2017-4952: falha em VMware Xenon
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.7%
VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
Produtos afetados
VMware · VMware XenonReferências
http://seclists.org/oss-sec/2018/q1/153https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21chttps://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0ahttps://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3http://www.securityfocus.com/bid/103093