medium5.4
CVE-2017-4930
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's '…
Impact
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Airwatch | from 9.0.0 before 9.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101772
- http://www.securitytracker.com/id/1039750
- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
- http://www.securityfocus.com/bid/101772
- http://www.securitytracker.com/id/1039750
- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html