CVE-2017-4931 Vulnerability Details

  /     /     /  

CVE-2017-4931 Metadata Quick Info

CVE Published: 16/11/2017 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: vmware | Vendor: VMware | Product: VMware AirWatch Console (AWC)
Status : PUBLISHED

---

CVE-2017-4931 Description

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device\'s log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: CSV file integrity vulnerability
Source: VMware

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).