CVE-2010-0686 WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unsp...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware virtualcenter | = 2.0.2 | No fix listed |
| VMware virtualcenter | = 2.5 | No fix listed |
| VMware server | = 2.0.0 | No fix listed |
| VMware esx server | = 3.0.3 | No fix listed |
| VMware esx server | = 3.5 | No fix listed |
References
- [security-announce] 20100329 VMSA-2010-0005 VMware products address vulnerabilities in WebAccess mailing-list patch vendor-advisory
- 39037 patch vdb-entry
- 1023769 vdb-entry
- www.vmware.com patch vendor-advisory