Vulnerability Description
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Vcenter Chargeback Manager | <= 2.5.0 |
Related Weaknesses (CWE)
References
- http://www.vmware.com/security/advisories/VMSA-2013-0008.htmlVendor Advisory
- http://www.vmware.com/security/advisories/VMSA-2013-0008.htmlVendor Advisory
FAQ
What is CVE-2013-3520?
CVE-2013-3520 is a vulnerability with a CVSS score of 7.5 (HIGH). VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
How severe is CVE-2013-3520?
CVE-2013-3520 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-3520?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Vcenter Chargeback Manager.