CVE-2017-4930

published 2017-11-16

CVE-2017-4930: VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
vmware	airwatch	>= 9.0.0 < 9.2.0	9.2.0
vmware	vmware_airwatch_console	—	—

CWE-79