CVE-2009-2277

Related Files

Web Service Hijacking In VMWare WebAccess

Posted Apr 1, 2010

Authored by Trustwave | Site trustwave.com

The Struts-based web application uses the server-side session sattribute "context_vmdirect" to store various settings, including the URL to the XML web service backend. By default, the URL is http://localhost/sdk, but the web service URL can be manually set from a client browser in several locations. If wsUrl is changed to point at an external server, all SOAP calls for that session are sent to the specified server. This includes plaintext authentication credentials. An attacker could exploit this by tricking a user into following a link to /ui/vmDirect.do, with an attacker-controlled server passed in the "view" parameter.

tags | advisory, web

advisories | CVE-2009-2277

SHA-256 | fd01d4172df55b8994b34803311ab871ff8630ad51141bd4511fe4f4065759a2

Download | Favorite | View

VMware Security Advisory 2010-0005

Posted Mar 31, 2010

Authored by VMware | Site vmware.com

VMware Security Advisory - A cross-site scripting vulnerability in WebAccess allows for disclosure of sensitive information. The flaw is due to insufficient verification of certain parameters which may lead to redirection of a user's requests. This vulnerability can only be exploited if the attacker tricks the WebAccess user into clicking a malicious link and the attacker has control of a server on the same network as the system where WebAccess is being used.

tags | advisory, xss

advisories | CVE-2009-2277, CVE-2010-1137, CVE-2010-0686

SHA-256 | 85919e5b4cda7ee681c52ebaf6b744efd4562b046b0744f8b117c70cc911302f

Download | Favorite | View