N/A

VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link.

N/A

N/A

VMware Horizon DaaS 安全漏洞

VMware Horizon DaaS是美国威睿（VMware）公司的一套专为以云计算服务形式交付桌面和应用而构建的虚拟桌面平台。该平台提供多桌面模式和多数据中心管理等功能。 VMware Horizon DaaS 7.0.0之前的版本中存在安全漏洞，该漏洞源于程序没有充分的验证数据。攻击者可通过诱使用户下载特制的RDP文件利用该漏洞绕过安全限制，并执行未授权的操作。

N/A

N/A