CVE-2016-7462

The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.

Date published : 2016-12-29

http://www.securityfocus.com/bid/94351

http://www.vmware.com/security/advisories/VMSA-2016-0020.html