CVE-2014-8372

medium VMware
CVSS v3 Base Score
4.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 69% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
None
Availability
None
Published: December 11, 2014 (4172 days ago)
Last Modified: May 6, 2026
Vendor: VMware
Source: NVD

Description

AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vectors involving a direct object reference.

CWE

CWE-200

Affected Products

vmware airwatch

References

🔗 seclists.org 🔗 www.vmware.com 🔗 seclists.org 🔗 www.vmware.com