CVE-2018-6976

MEDIUM

Vmware Workspace One < 4.14 - Missing Encryption

Title source: rule
STIX 2.1

Description

The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencrypted filenames and associated metadata in SQLite database for the Content Locker.

Scores

CVSS v3 5.3
EPSS 0.0015
EPSS Percentile 35.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-311
Status published
Products (1)
vmware/workspace_one < 4.14
Published Sep 11, 2018
Tracked Since Feb 18, 2026