Monday, March 19, 2012

Vulnerabilities In VMware View

There has been found four vulnerabilities in VMware View, software for workstation virtualizing. Three of them may lead to local privilege escalation on View virtual desktops. The fourth one is a cross-site scripting vulnerability. The vulnerability in View Manager Portal may allow a remote attacker to run scripts in the victim's browser.

Affected versions are VMware View 4.6 and earlier versions.

More information in related security advisory.

No comments: