imPC@ndo IT

Tracker / CVE-2017-4947

CVE-2017-4947

Critical 9.8

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.

Affected products and versions

vmware vrealize_automation
vmware vsphere_integrated_containers · … → 1.3.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References