PT-2018-17840 · Vmware · Vmware Horizon Daas
CVE-2018-6960
·
Publicado
2018-04-20
·
Atualizado
2018-05-22
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
VMware Horizon DaaS versions 7.x before 8.0.0
Description
The issue is related to a broken authentication mechanism that could allow an attacker to bypass two-factor authentication. To exploit this, an attacker must have a legitimate account on the system.
Recommendations
For versions 7.x before 8.0.0, update to version 8.0.0 or later to resolve the issue.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Vmware Horizon Daas