Description
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware AirWatch Console (AWC) | 9.x before 9.2.0 | — |
References
- 1039750 vdb-entry
- https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html
- 101772 vdb-entry