RCE in Vmware Vcenter_server_appliance
CVE-2013-3079
VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface (VAMI) access.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.005 (65.2th percentile) — read the EPSS interpretation.
Affected products
- Vmware Vcenter_server_appliance — versions 5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)