CVE-2014-8372: Infoleak
AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vectors involving a direct object reference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8372?
CVE-2014-8372 is classified as a high severity vulnerability due to the potential for unauthorized access to sensitive organizational information.
How do I fix CVE-2014-8372?
To remediate CVE-2014-8372, upgrade to VMware AirWatch On-Premise version 7.3.3.0 or later.
What are the consequences of CVE-2014-8372 exploitation?
Exploitation of CVE-2014-8372 could allow remote authenticated users to access organizational data from other tenants, leading to data leakage and privacy breaches.
Which versions of VMware AirWatch are affected by CVE-2014-8372?
CVE-2014-8372 affects VMware AirWatch versions prior to 7.3.3.0, including version 7.3.0.0.
Is CVE-2014-8372 a remote or local vulnerability?
CVE-2014-8372 is a remote vulnerability that can be exploited by authenticated users from any location.