| Package | Affected versions | Patched versions |
|---|---|---|
| carbon black app control | ≥ 8.5, < 8.5.14≥ 8.6, < 8.6.6≥ 8.7.0, < 8.7.4≥ 8.8.0, < 8.8.2 | 8.5.148.6.68.7.48.8.2 |
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free