CVE-2017-4928

moderate-risk
Published 2017-11-17

The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.

Do I need to act?

-
0.17% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Vmware

References (6)

Third Party Advisory http://www.securityfocus.com/bid/101785
Third Party Advisory http://www.securitytracker.com/id/1039759
Patch https://www.vmware.com/security/advisories/VMSA-2017-0017.html
Third Party Advisory http://www.securityfocus.com/bid/101785
Third Party Advisory http://www.securitytracker.com/id/1039759
Patch https://www.vmware.com/security/advisories/VMSA-2017-0017.html
49
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 22/34 · High