CVE-2009-2968
Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- vmware:studio
References
- http://lists.vmware.com/pipermail/security-announce/2009/000064.html
- http://www.securityfocus.com/archive/1/506191/100/0/threaded
- http://www.securityfocus.com/bid/36199
- http://www.vmware.com/security/advisories/VMSA-2009-0011.html
- http://www.vmware.com/support/developer/studio/studio20/release_notes.html