Directory Traversal Vulnerability in VMware Studio by VMware

CVE-2009-2968

Summary

A directory traversal vulnerability exists in VMware Studio 2.0 public beta, which permits unauthorized remote attackers to upload files to any directory on the server. This flaw results from inadequate input validation in the web interface support component, allowing attackers to exploit unspecified vectors to manipulate file paths. By exploiting this vulnerability, an attacker could potentially gain access to sensitive files or images on the server, posing serious security risks. It is crucial for users to implement the latest security updates to mitigate any potential threats.

References