VULNERABILITY INTELLIGENCE

CVE-2017-4942

CVSS score4.9 MEDIUM

EPSS probability1.67%

CISA KEVNot currently listed

Published2017-12-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator.

Primary references

security@vmware.com — Third Party Advisory, VDB Entry
security@vmware.com — Third Party Advisory, VDB Entry
security@vmware.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory