CVE-2014-8372

CWE-200 — Information Exposure3 documents3 sources
Severity
4.0MEDIUM
EPSS
0.1%
top 68.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Airwatch
Timeline
PublishedDec 11
Latest updateMay 17

Description

AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vectors involving a direct object reference.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDvmware/airwatch7.3.3.0+1

🔴Vulnerability Details

2
GHSA
GHSA-x9wv-pg9w-7fpw: AirWatch by VMware On-Premise 7↗2022-05-17
▶
CVEList
CVE-2014-8372: AirWatch by VMware On-Premise 7↗2014-12-11
▶
CVE-2014-8372 (MEDIUM CVSS 4) | AirWatch by VMware On-Premise 7.3.x | cvebase.io