VMware View Planner Arbitrary File Upload

This strike exploits a file upload vulnerability in VMware View Planner. An remote unauthenticated attacker can send a malicious HTTP POST request to upload an arbitrary file via 'logupload' endpoint. Successful exploitation can lead to execution of arbitrary code on the target system with root privileges.