Multiple vulnerabilities in VMware vSphere Client

Описание

Multiple critical vulnerabilities have been found in VMware vSphere. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security. Below is a complete list of vulnerabilities

1. An improper client file update validation can be exploited remotely;
2. An improper X.509 certificates validation can be exploited remotely via SSL service spoofing;

Первичный источник обнаружения

• VMware bulletin
  

Связанные продукты

• VMware-vSphere-Client

Список CVE

• CVE-2014-1210
  high
• CVE-2014-1209
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com