Remote Code Execution Vulnerability in VMware vCenter Chargeback Manager
CVE-2013-3520

Currently unrated

Key Information:

Vendor
Vmware
Status
Vcenter Chargeback Manager
Vendor
CVE Published:
17 June 2013

Summary

VMware vCenter Chargeback Manager prior to version 2.5.1 has a vulnerability that permits attackers to upload malicious files, potentially leading to the execution of arbitrary code. This security flaw arises from improper handling of file uploads, exposing systems to unauthorized access and manipulation. Users are highly encouraged to update to the latest version to mitigate this risk.

References

http://www.vmware.com/security/advisories/VMSA-2013-0008....
x_refsource_CONFIRM

EPSS Score

81% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.