EUVD-2017-14059

Malware in sbrugna...

PT-2018-8230

Name of the Vulnerable Software and Affected Versions: VMware AirWatch Console versions 9.1.x through 9.1.4 VMware AirWatch Console versions 9.2.x through 9.2.1 Description: The issue allows an attacker to exploit a Cross Site Request Forgery vulnerability when accessing the App Catalog,...

VMware AirWatch Console Cross-Site Request Forgery Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console AWC, a suite of enterprise mobility management solutions from VMware, Inc. A cross-site request forgery vulnerability exists in VMware AWC versions 9.2.x and 9.1.x. The vulnerability stems from the program failing to...

CVE-2017-4951: Cross-Site Request Forgery (CSRF)

VMware AirWatch Console 9.2.x before 9.2.2 and 9.1.x before 9.1.5 contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices...

VMware AirWatch Console Access Bypass Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console AWC, a suite of enterprise mobility management solutions from VMware, Inc. An access bypass vulnerability exists in VMware AWC. An attacker could exploit this vulnerability to obtain end-user device information...

CVE-2017-4942

VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator...

CVE-2017-4942: Undefined Security Weakness

VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator...

PT-2017-16224

Name of the Vulnerable Software and Affected Versions VMware AirWatch Console AWC affected versions not specified Description The issue is related to a Broken Access Control problem. It could potentially lead to the disclosure of end-user device details to unauthorized administrators...

VMware AirWatch Console updates address Broken Access Control vulnerability.

VMware AirWatch Console AWC Broken Access Control VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator. The Common Vulnerabilities and Exposures...

CVE-2017-4930

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL...

CVE-2017-4931: Improper Input Validation

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious conten...

CVE-2017-4930: Improper Neutralization of Input During Web Page Generation

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL...

PT-2017-16214

Name of the Vulnerable Software and Affected Versions VMware AirWatch Console versions prior to 9.2.0 Description The issue allows an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation could result in an unsuspecting AWC user opening a CSV file...

PT-2017-16213

Name of the Vulnerable Software and Affected Versions VMware AirWatch Console versions prior to 9.2.0 Description The issue allows an authenticated user to add a malicious URL to an enrolled device's 'Links' page, potentially redirecting unsuspecting users to harmful sites. Recommendations For...