CVE-2016-7087

5.3MEDIUM

Key Information:

Vendor
Vmware
Status
Horizon View
Vendor
CVE Published:
29 December 2016

Summary

Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors.

References

http://www.securityfocus.com/bid/93455
vdb-entryx_refsource_BID
http://www.vmware.com/security/advisories/VMSA-2016-0015....
x_refsource_CONFIRM
http://www.securitytracker.com/id/1036972
vdb-entryx_refsource_SECTRACK

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.