CVE-2010-2667

VMware Studio 2.0 - Authenticated Remote Command Execution via VAMI

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving (1) the Studio virtual appliance or (2) a virtual appliance created by the Studio virtual appliance.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60350
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/512311/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024187
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40507
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41566
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1791
Patch, Vendor Advisory x_refsource_confirm
http://www.wmware.com/security/advisories/VMSA-2010-0011.html

Scores

EPSS 0.0105
EPSS Percentile 77.7%

Details

Status published
Products (1)
vmware/studio 2.0
Published Jul 22, 2010
Tracked Since Feb 18, 2026