Lucene search
PRIOn knowledge basePRION:CVE-2016-7462HistoryDec 29, 2016 - 9:59 a.m.
Deserialization of untrusted data
2016-12-2909:59:00
PRIOn knowledge base
www.prio-n.com
4
The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vrealize_operations | eq | 6.1.0 | |
| vrealize_operations | eq | 6.0.0 | |
| vrealize_operations | eq | 6.2.97 | |
| vrealize_operations | eq | 6.2.1 | |
| vrealize_operations | eq | 6.3.0 |
Related
openvas
openvas
nvd
nvd
CVE-2016-7462
2016-12-29 09:59:00
nessus
nessus
cvelist
cvelist
CVE-2016-7462
2016-12-29 09:02:00
vmware
vmware
vRealize Operations update addresses REST API deserialization vulnerability
2016-11-15 00:00:00
cve
cve
CVE-2016-7462
2016-12-29 09:59:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08