VMware View Planner 漏洞列表

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability due to improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability due to improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.

VMware是一家云基础架构和移动商务解决方案厂商，View Planner 是旗下推出的一款针对view桌面的测试工具。2021年3月2日，VMware官方发布安全公告，披露了CVE-2021-21978 VMware View Planner远程代码执行漏洞。3月4日，漏洞利用代码在互联网上公开，攻击者构造恶意请求，可上传恶意文件，执行任意代码。

2021年3月2日，VMware 官方发布安全公告，披露了CVE-2021-21978 VMware View Planner 远程代码执行漏洞。3月4日，漏洞利用代码在互联网上公开，攻击者构造恶意请求，可上传恶意文件，执行任意代码。