VMware View Planner 代码问题漏洞

Headquartered in Palo Alto, California, VMware is the global leader in desktop-to-data center virtualization solutions. An unauthorized RCE vulnerability exists in VMware View Planner, which can be exploited by an attacker to remotely execute code in the logupload container. An attacker could...

VMware View Planner Unauthenticated Log File Upload RCE

This module exploits an unauthenticated log file upload within the loguploadwsgi.py file of VMWare View Planner 4.6 prior to 4.6 Security Patch 1. Successful exploitation will result in RCE as the apache user inside the appacheServer Docker container. Module Options msf use...

PT-2021-2362 · Vmware · Vmware View Planner

Name of the Vulnerable Software and Affected Versions: VMware View Planner versions prior to 4.6 Security Patch 1 Description: The issue is related to the lack of authorization and improper input validation in the logupload web application of VMware View Planner, allowing an unauthorized attacker...