VMware ESXi HTML injection vulnerability in CVE-2017-4940)

VMware ESXi HTML injection vulnerability in CVE-2017-4940)
VMware ESXi HTML injection vulnerability in CVE-2017-4940)

Release date:
Updated on:

Affected Systems:

VMWare ESXi 1, 6.5
VMWare ESXi 1, 5.5

Description:

Bugtraq id: 102241
CVE (CAN) ID: CVE-2017-4940

VMware Workstation is a powerful desktop virtual computer.

VMware ESXi has a cross-site scripting security vulnerability in the ESXi Host Client implementation. Attackers can exploit this vulnerability to inject Javascript scripts. Other users execute these scripts when accessing the Host Client.

<* Source: Alain Homewood
*>

Suggestion:

Vendor patch:

VMWare
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.vmware.com
Https://www.vmware.com/security/advisories/VMSA-2017-0021.html