CVE-2013-3520

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.

Date published : 2013-06-16

http://www.vmware.com/security/advisories/VMSA-2013-0008.html