2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"Airwatch Console","vendor":"VMware","versions":[{"status":"affected","version":"Any"}]}],"source":"security@vmware.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*","matchCriteriaId":"3E12528D-A1E2-4B57-9885-EFA134FC4208","versionEndExcluding":"9.2.2.0","versionStartIncluding":"9.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator."},{"lang":"es","value":"VMware AirWatch Console (AWC) contiene una vulnerabilidad de control de acceso roto. La explotación con éxito de este problema podría desembocar en la revelación de detalles del dispositivo del usuario final a un administrador no autorizado."}],"id":"CVE-2017-4942","lastModified":"2026-06-17T01:19:36.727","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-12-13T02:29:11.077","references":[{"source":"security@vmware.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102171"},{"source":"security@vmware.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040003"},{"source":"security@vmware.com","tags":["Patch","Vendor Advisory"],"url":"https://www.vmware.com/security/advisories/VMSA-2017-0020.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/102171"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040003"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.vmware.com/security/advisories/VMSA-2017-0020.html"}],"sourceIdentifier":"security@vmware.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|