CVE:CVE-2017-4946
CNNVD:CNNVD-201801-238
VMware V4H和V4PA desktop agents都是美国威睿（VMware）公司的产品。VMware V4H是一套用于Horizon（云平台）的IT运维管理软件。V4PA desktop agents是一款IT运维管理桌面应用程序。
VMware V4H和V4PA desktop agents 6.5.1之前的6.x版本中存在提权漏洞。攻击者可利用该漏洞将用户权限提升至SYSTEM。
solution:Upgrade vmware vrealize_operations_for_horizon to a higher version than 6.5.1,and avoid the version [6.0,6.5.1); Upgrade vmware vrealize_operations_for_published_applications to a higher version than 6.5.1,and avoid the version [6.1.0,6.5.1)