CVE Vulnerability

CVE-2018-6968

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real time File Manager capabilities. This vulnerability may allow for unauthorized creation and execution of files in the Agent sandbox and other publicly accessible directories such as those on the SD card by a malicious administrator.

7.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

10 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
http://www.vmware.com/security/advisories/VMSA-2018-0015.html Vendor Advisory
http://www.securitytracker.com/id/1041060 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/104441 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:vmware:airwatch_agent:*:*:*:*:*:android:*:*
cpe:2.3:a:vmware:airwatch_agent:*:*:*:*:*:windows_mobile:*:*
Information

Published : 2018-06-11 10:29

Updated : 2019-10-03 12:03

NVD link : CVE-2018-6968

Mitre link : CVE-2018-6968

Products Affected
No products.
CWE
NVD-CWE-noinfo