Lucene search

K
vmwareVMwareVMSA-2012-0017
HistoryDec 13, 2012 - 12:00 a.m.

VMware View Server directory traversal

2012-12-1300:00:00
www.vmware.com
29

0.003 Low

EPSS

Percentile

67.9%

a. VMware View Server directory traversalVMware View contains a critical directory traversal vulnerability that allows an unauthenticated remote attacker to retrieve arbitrary files from affected View Servers. Exploitation of this issue may expose sensitive information stored on the server.WorkaroundsThis vulnerability affects both the View Connection Server and the View Security Server; VMware recommends that customers immediately update both servers to a fixed version of View.Customers who are unable to immediately update their View Servers should consider the following options:

CPENameOperatorVersion
viewltView 5.1.2
viewltView 4.6.2

0.003 Low

EPSS

Percentile

67.9%