imPC@ndo IT

Tracker / CVE-2017-4951

CVE-2017-4951

High 8.8

VMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request Forgery vulnerability when accessing the App Catalog. An attacker may exploit this issue by tricking users into installing a malicious application on their devices.

Affected products and versions

vmware airwatch · 9.1 → 9.1.5
vmware airwatch · 9.2 → 9.2.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References