Unauthorized RCE in VMware VCenter (opens in new tab)

(swarm.ptsecurity.com)

13 pointspedro845y ago1 comments

1 comments

1 comments · 1 top-level

Could anyone explain to me why the jsp shell is running as system user? Shouldn't it be the user of the webserver? (something like vsphere-ui?

j / k navigate · click thread line to collapse