CVE-2013-3520

Published: Jun 17, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (7)

Products: Vmware: Vcenter Chargeback Manager

Vmware

1 product

Vcenter Chargeback Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Vmware Vcenter Chargeback Manager	Up to 2.5.0
Vmware Vcenter Chargeback Manager	Version 1.5.0
Vmware Vcenter Chargeback Manager	Version 1.6.0
Vmware Vcenter Chargeback Manager	Version 1.6.1
Vmware Vcenter Chargeback Manager	Version 1.6.2
Vmware Vcenter Chargeback Manager	Version 2.0.0
Vmware Vcenter Chargeback Manager	Version 2.0.1

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

http://www.vmware.com/security/advisories/VMSA-2013-0008.html

Source: cve@mitre.org

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2013-0008.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.