high7.5Public exploit code
CVE-2013-3520
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecifie…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware vCenter - Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)2013-07-23 · remote · windows · Verified
Impact
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vcenter Chargeback Manager | through 2.5.0 Versions 1.5.0, 1.6.0, 1.6.1, 1.6.2, 2.0.0 |