CVEvulnerability
CVE-2012-5978
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitrary files via unspecified vectors.
Affected configurations
• vmware view 4.0.0
• vmware view 4.5
• vmware view 4.6.0
• vmware view 4.6.1
• vmware view 5.0.0
• vmware view 5.0.1
• vmware view 5.1.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securitytracker.com/id?1027875 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2012-0017.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17049 oval.cisecurity.org
- http://www.securitytracker.com/id?1027875 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2012-0017.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17049 oval.cisecurity.org