CVE-2017-4897

CVE-2017-4897 is a medium-severity vulnerability affecting VMware Horizon DaaS before version 7.0.0, stemming from insufficient data validation. An attacker could exploit this by tricking DaaS client users into connecting to a malicious server via a specially crafted RDP file, leading to the sharing of all their drives and devices. The attack requires user interaction (UI:R) and local access (AV:L), but could result in high confidentiality impact (C:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.