CVE-2018-6979: vmware airwatch_console
Vulnerability summary
CVE-2018-6979 is a high (CVSS 7.4) vulnerability in vmware airwatch_console. EPSS estimates a 1.09% chance of exploitation in the next 30 days, higher than 64.8% of scored vulnerabilities.
Timeline
- 05-10-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled, but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.09%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
0.00 pp
From 1.09% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Vmware2 products
- airwatch_console≥ 9.1.0.0, < 9.1.5.6 | ≥ 9.2.0.0, < 9.2.3.27 | ≥ 9.3.0.0, < 9.3.0.25 | ≥ 9.4.0.0, < 9.4.0.22 | ≥ 9.5.0.0, < 9.5.0.16 | ≥ 9.6.0.0, < 9.6.0.7 | ≥ 9.7.0.0, < 9.7.0.3
- vmware workspace one unified endpoint management console (airwatch console)9.7.x prior to 9.7.0.8 | 9.6.x prior to 9.6.0.8 | 9.5.x prior to 9.5.0.17 | 9.4.x prior to 9.4.0.23 | 9.3.x prior to 9.3.0.25 | 9.2.x prior to 9.2.3.28 | 9.1.x prior to 9.1.5.6
1 vendor · 2 products