CVE-2010-2667

Published Jul 22, 2010

Last updated 3 months ago

Overview

Description: Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 6
Impact score: 6.4
Exploitability score: 6.8
Vector string: AV:N/AC:M/Au:S/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vmware:studio:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0DA971BE-90C8-4181-840E-0A5DDE9692CE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References