2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"VMware AirWatch Console (AWC)","vendor":"VMware","versions":[{"status":"affected","version":"9.x before 9.2.0"}]}],"source":"security@vmware.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:airwatch:*:*:*:*:*:*:*:*","matchCriteriaId":"C68AA4C8-EFF0-44C6-979E-0F75B2355A1D","versionEndExcluding":"9.2.0","versionStartIncluding":"9.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL."},{"lang":"es","value":"VMware AirWatch Console en versiones 9.x anteriores a la 9.2.0 contiene una vulnerabilidad que podría permitir que un usuario AWC autenticado añada una URL maliciosa en la página \"Links\" de un dispositivo registrado. Una explotación exitosa de este problema podría provocar que se redirija un usuario AWC desprevenido a una URL maliciosa."}],"id":"CVE-2017-4930","lastModified":"2026-06-17T01:19:35.173","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-11-16T21:29:00.513","references":[{"source":"security@vmware.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/101772"},{"source":"security@vmware.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1039750"},{"source":"security@vmware.com","tags":["Patch","Vendor Advisory"],"url":"https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/101772"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1039750"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html"}],"sourceIdentifier":"security@vmware.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}
|