CVEvulnerability
CVE-2016-7087
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors.
Affected configurations
• vmware horizon view 5.0
• vmware horizon view 5.0.1
• vmware horizon view 5.1
• vmware horizon view 5.1.3
• vmware horizon view 5.2.0
• vmware horizon view 5.3
• vmware horizon view 6.0
• vmware horizon view 6.0.2
• vmware horizon view 6.1
• vmware horizon view 6.1.1
• vmware horizon view 6.2
• vmware horizon view 7.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securityfocus.com/bid/93455 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036972 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2016-0015.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93455 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036972 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2016-0015.html Patch, Vendor Advisory