CVE-2010-1137

Related Files

VMware Security Advisory 2010-0005

Posted Mar 31, 2010

Authored by VMware | Site vmware.com

VMware Security Advisory - A cross-site scripting vulnerability in WebAccess allows for disclosure of sensitive information. The flaw is due to insufficient verification of certain parameters which may lead to redirection of a user's requests. This vulnerability can only be exploited if the attacker tricks the WebAccess user into clicking a malicious link and the attacker has control of a server on the same network as the system where WebAccess is being used.

tags | advisory, xss

advisories | CVE-2009-2277, CVE-2010-1137, CVE-2010-0686

SHA-256 | 85919e5b4cda7ee681c52ebaf6b744efd4562b046b0744f8b117c70cc911302f

Download | Favorite | View