CVE-2017-4951

2018-01-2916:00:00

vmware

www.cve.org

AI Score

8.7

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices.

CNA Affected

[
  {
    "product": "AirWatch Console",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "9.2.x before 9.2.2"
      },
      {
        "status": "affected",
        "version": "9.1.x before 9.1.5"
      }
    ]
  }
]