« Volver al listado

CVE-2018-6979

Estado: ModificadaAlta (7.4)—

The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled, but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vmware — Airwatch Console

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-6979",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console)",
          "versions": [
            {
              "status": "affected",
              "version": "9.7.x prior to 9.7.0.8"
            },
            {
              "status": "affected",
              "version": "9.6.x prior to 9.6.0.8"
            },
            {
              "status": "affected",
              "version": "9.5.x prior to 9.5.0.17"
            },
            {
              "status": "affected",
              "version": "9.4.x prior to 9.4.0.23"
            },
            {
              "status": "affected",
              "version": "9.3.x prior to 9.3.0.25"
            },
            {
              "status": "affected",
              "version": "9.2.x prior to 9.2.3.28"
            },
            {
              "status": "affected",
              "version": "9.1.x prior to 9.1.5.6"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-10-05T12:29:00.227",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1041808",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security@vmware.com"
    },
    {
      "url": "https://www.vmware.com/security/advisories/VMSA-2018-0024.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@vmware.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1041808",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.vmware.com/security/advisories/VMSA-2018-0024.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled, but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases."
    },
    {
      "lang": "es",
      "value": "VMware Workspace ONE Unified Endpoint Management Console (A/W Console) en versiones 9.7.x anteriores a la 9.7.0.8, versiones 9.6.x anteriores a la 9.6.0.8, versiones 9.5.x anteriores a la 9.5.0.17, versiones 9.4.x anteriores a la 9.4.0.23, versiones 9.3.x anteriores a la 9.3.0.25, versiones 9.2.x anteriores a la 9.2.3.28 y versiones 9.1.x anteriores a la 9.1.5.6 contiene una vulnerabilidad de omisión de autenticación SAML que puede aprovecharse durante la inscripción de dispositivos. Esta vulnerabilidad podría permitir que un actor malicioso suplante una sesión SAML autorizada si la autenticación basada en certificados está habilitada. Esta vulnerabilidad también es relevante si la autenticación basada en certificados no está habilitada, pero el resultado de la explotación está limitado a una divulgación de información (severidad importante) en estos casos."
    }
  ],
  "lastModified": "2026-06-17T02:02:33.123",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "930FC50B-9DD2-4176-ACF9-DE4F2590EDBB",
              "versionEndExcluding": "9.1.5.6",
              "versionStartIncluding": "9.1.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09616FF2-D8C5-45E0-9AC0-ABEABE831545",
              "versionEndExcluding": "9.2.3.27",
              "versionStartIncluding": "9.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF283C89-0779-471F-A5B4-C5B223DAB356",
              "versionEndExcluding": "9.3.0.25",
              "versionStartIncluding": "9.3.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAE8A9D7-A160-4590-ACB4-1F3B381E9764",
              "versionEndExcluding": "9.4.0.22",
              "versionStartIncluding": "9.4.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27D34C65-47DC-47E3-8C2A-34DE9F9FAF9A",
              "versionEndExcluding": "9.5.0.16",
              "versionStartIncluding": "9.5.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A66B1E18-B74E-4635-83A7-4C3274659258",
              "versionEndExcluding": "9.6.0.7",
              "versionStartIncluding": "9.6.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vmware:airwatch_console:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43C7403F-01AE-4D89-B641-34844A857376",
              "versionEndExcluding": "9.7.0.3",
              "versionStartIncluding": "9.7.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@vmware.com"
}