Unauthorized RCE in VMware VCenter (opens in new tab)

(swarm.ptsecurity.com)

13 pointspedro845y ago1 comments

1 comments

Could anyone explain to me why the jsp shell is running as system user? Shouldn't it be the user of the webserver? (something like vsphere-ui?

j / k navigate · click thread line to collapse

(swarm.ptsecurity.com)

13 pointspedro845y ago1 comments

Could anyone explain to me why the jsp shell is running as system user? Shouldn't it be the user of the webserver? (something like vsphere-ui?

j / k navigate · click thread line to collapse