CVEvulnerability
CVE-2017-4931
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-11-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.
Affected configurations
• vmware airwatch (>= 9.0.0 < 9.2.0)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/101772 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039750 Third Party Advisory, VDB Entry
- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/101772 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039750 Third Party Advisory, VDB Entry
- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html Patch, Vendor Advisory