CVE-2018-6971
published 2018-07-25CVE-2018-6971: VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log…
PriorityP335high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.42%
34.9th percentile
VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | fusion_pro | — | — |
| vmware | horizon_view_agent | — | — |
| vmware | horizon_view_agents | >= 7.0.0 < 7.5.1 | 7.5.1 |
| vmware | vmware_esxi | — | — |
| vmware | vmware_fusion | — | — |
| vmware | vmware_horizon | — | — |
| vmware | vmware_vrealize | — | — |
| vmware | vmware_vsphere | — | — |
| vmware | vmware_workstation | — | — |
| vmware | workstation_player | — | — |
| vmware | workstation_pro | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware Horizon View Agent, VMware ESXi, Workstation, and Fusion updates resolve multiple security issues
vendor_vmware·2018-07-19·CVSS 7.8
CVE-2018-6971 [HIGH] VMware Horizon View Agent, VMware ESXi, Workstation, and Fusion updates resolve multiple security issues
VMSA-2018-0018: VMware Horizon View Agent, VMware ESXi, Workstation, and Fusion updates resolve multiple security issues
a. VMware Horizon View Agent local information disclosure vulnerability VMware Horizon View Agents contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2018-6971 to this issue. Column 5 of the following table lists the action required to remediate
GHSA
GHSA-h9j3-9qh7-j5xq: VMware Horizon View Agents (7
ghsa_unreviewed·2022-05-13
CVE-2018-6971 [HIGH] CWE-532 GHSA-h9j3-9qh7-j5xq: VMware Horizon View Agents (7
VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/104883http://www.securitytracker.com/id/1041357http://www.securitytracker.com/id/1041358https://www.vmware.com/security/advisories/VMSA-2018-0018.htmlhttp://www.securityfocus.com/bid/104883http://www.securitytracker.com/id/1041357http://www.securitytracker.com/id/1041358https://www.vmware.com/security/advisories/VMSA-2018-0018.html
2018-07-25
Published