VMware AirWatch Console Module access restriction bypassing Vulnerability (CVE-2017-4942)

VMware AirWatch Console Module access restriction bypassing Vulnerability (CVE-2017-4942)
VMware AirWatch Console Module access restriction bypassing Vulnerability (CVE-2017-4942)

Release date:
Updated on:

Affected Systems:

VMWare Airwatch

Description:

Bugtraq id: 102171
CVE (CAN) ID: CVE-2017-4942

VMware AirWatch is an enterprise mobile management solution.

The VMware AirWatch Console (AWC) has an access control vulnerability. After successful exploitation, attackers can obtain terminal user device information.

<* Source: vendor
*>

Suggestion:

Vendor patch:

VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.vmware.com
Https://www.vmware.com/us/security/advisories/VMSA-2017-0020.html