Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2014-8373

Description

The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the "Connect (by) Using VMRC" function.

POC

Reference

- http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html

- http://seclists.org/fulldisclosure/2014/Dec/33

Github

No PoCs found on GitHub currently.