writeups.xyz / SD-PWN Part 4 — VMware VeloCloud — The Last Takeover

Submitter : c2a

Date: 26 November 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• Authentication Bypass
• Default Credentials
• SQL Injection
• Path Traversal
• LFI

Programs :

• VMware

Authors :

• Realmode Labs (@RealmodeLabs)

Link :
https://medium.com/realmodelabs/sd-pwn-part-4-vmware-velocloud-the-last-takeover-a7016f9a9175