CVE-2017-4947 VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote at...
CriticalCVSS 9.8
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote attackers to execute arbitrary code on the appliance.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vrealize automation | = 7.2.0 | No fix listed |
| VMware vrealize automation | = 7.3.0 | No fix listed |
| VMware vsphere integrated containers | < 1.3.0 | 1.3.0 |
| VMware vrealize automation | = 7.3 and 7.2 | No fix listed |
| VMware vsphere integrated containers | = 1.x before 1.3 | No fix listed |
References
- 102852 third-party-advisory vdb-entry
- 1040289 third-party-advisory vdb-entry
- 1040290 third-party-advisory vdb-entry
- www.vmware.com patch vendor-advisory