CVE-2010-2667
published 2010-07-22CVE-2010-2667: Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute…
PriorityP432medium6CVSS 2.0
AVNACMAuSCPIPAP
EPSS
2.09%
79.4th percentile
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | studio | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8cc3-q3fm-w335: Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2
ghsa_unreviewed·2022-05-14
CVE-2010-2667 [MEDIUM] GHSA-8cc3-q3fm-w335: Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.
VMware
VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
vendor_vmware·2010-07-13
CVE-2010-2427 [HIGH] VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
VMSA-2010-0011: VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
a. VMware Studio 2.0 remote command execution by Studio user VMware Studio is a development tool to create and manage virtual appliances. VMware Studio itself is a virtual appliance. A vulnerability in the Virtual Appliance Management Infrastructure (VAMI) allows for remote command execution in Studio 2.0 or in virtual appliances created with Studio 2.0. Exploitation of the issue requires authentication to Studio or to the virtual appliance. Studio 2.0 ---------- The vulnerability may be exploited on Studio if both of these conditions apply: - you have Studio 2.0 and - you have created a user account with limited privileges (this is not the default configuration). Studio is
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlhttp://secunia.com/advisories/40507http://securitytracker.com/id?1024187http://www.securityfocus.com/archive/1/512311/100/0/threadedhttp://www.securityfocus.com/bid/41566http://www.vupen.com/english/advisories/2010/1791http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/60350http://lists.vmware.com/pipermail/security-announce/2010/000101.htmlhttp://secunia.com/advisories/40507http://securitytracker.com/id?1024187http://www.securityfocus.com/archive/1/512311/100/0/threadedhttp://www.securityfocus.com/bid/41566http://www.vupen.com/english/advisories/2010/1791http://www.wmware.com/security/advisories/VMSA-2010-0011.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/60350
2010-07-22
Published