Once this file is opened, it will connect to the attacker’s IP address such that their local drive will be mapped to the attacker’s remote desktop server. By using newline characters ( %0a) in the parameter, it is possible to include extra settings into the remote desktop connection file, such as drive mapping redirections.Įxample: An authenticated administrator that was manipulated into clicking the above URL will receive a remote desktop connection file. However, it was found that the ipAddress parameter within getRdpByIP does not properly validate the input supplied by a user. The request will look similar to the following: /admin/getRdpByIp.action?ipAddress= This process only can be performed by a user with administrative privilege. Horizon DaaS allows a creation of a remote desktop connection file through the application. This list will help shorten the time to evaluate and make a decision to choose a good DaaS provider.Improper IP Address Validation (CVE-2017-4897)> Improper IP Address Validation (CVE-2017-4897) It is difficult to evaluate every DaaS service provider available to make an informed decision, especially when you are short on time and have to enable a large workforce. All are good DaaS providers.Įventually, it all boils down to which provider serves your purpose the best and meets your budget requirements as well. You cannot go wrong with any of the players mentioned above. VMware Collaboration with Cisco, NetApp and Equinix The new OneStep solution provides a foundation for service providers to deliver the most cost-effective DaaS offering in the market. The license cost of Horizon Apps Universal License is $8.25 per month for a named user and $13.40 per month for the concurrent user.įor Horizon Universal License, the named user costs $16.50 per month and for concurrent users, one would have to shell out $26.70 per month. VMware Horizon DaaS Platform is the only virtual desktop platform built for delivering desktops and applications as a cloud service. This can be beneficial for enterprises that would be looking to maximize productivity and keep costs low. The other option is per concurrent session in which a session can be shared between multiple users. Subscriptions from VMware include a per-user subscription in which a dedicated virtual desktop is provided to a user. Similarly, users who wish to opt for IBM Cloud can get their subscription. Users can either purchase their own Microsoft Azure plan or purchase the license for it from VMware.
VMware has partnered with Microsoft and IBM to provide the users with an option of which cloud infrastructure they wish to opt for. VMware’s Horizon Cloud is a pure DaaS platform without any of its own infrastructure.
0 kommentar(er)
