Skip to content
fr Sign in
Not rated

CVE-2017-4897 VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data

Description

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link.

Affected products and versions

Product Affected versions Fixed in
Horizon DaaS Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Horizon DaaS

The 2 CVEs of Horizon DaaS →
CVE-2018-6960 VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to… Not rated
Track this CVE