Home→Vulnerabilities→CVE-2018-6971
Disclosed

CVE-2018-6971

VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.

Share this vulnerability:

Exploitation Probability (EPSS)

Low Priority
0.07%

The Exploit Prediction Scoring System (EPSS) uses machine learning to estimate the probability that a vulnerability will be exploited in the wild within the next 30 days.

0% (Theoretical)100% (Certainty)

7-Day Exploitation Trend

Vulnerability Timeline

2 events
Jul 25, 2018
Vulnerability Disclosed
Published to component-level vulnerability database.
Oct 3, 2019
Last Updated
Record updated with new analysis or tags.

Threat Actor Attribution

PREMIUM INTEL
Associated Groups:Lazarus Group, APT28
Ransomware Campaigns:LockBit 3.0, BlackCat
IoCs (Indicators):14 IPs, 3 Hashes

Remediation & Mitigation

SOLUTION

Official patches and mitigation steps are available for this vulnerability.

# Update Command
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name

Affected Products

1 Total
vmware/horizon_view_agentsAll Versions

References

http://www.securityfocus.com/bid/104883Securityfocus
Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041357Securitytracker
Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041358Securitytracker
Third Party AdvisoryVDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0018.htmlVmware
Vendor Advisory

Am I Vulnerable?

Check your domain or package.json for CVE-2018-6971 exposure.

Share This Page

Help others discover this vulnerability information

Vulnerability Details

CVSS Base Score
2.1/ 10
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Published Date
Jul 25, 2018
Last Modified
Oct 3, 2019
Need API Access?

Integrate this data into your SOAR platform.

View Plans →
Need Manual Validation?

Automated scanners flag false positives. Get a manual pentest validation for this CVE.