CVE-2017-4931

Published: Nov 16, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content.

Affected (1)

Products: Vmware: Airwatch

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vmware Airwatch	From 9.0.0 to 9.2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.securityfocus.com/bid/101772

Source: security@vmware.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039750

Source: security@vmware.com

Third Party AdvisoryVDB Entry

https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html

Source: security@vmware.com

PatchVendor Advisory

http://www.securityfocus.com/bid/101772

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039750

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.