The sources of external threats are systems and users outside the cloud, including attackers from the Internet against VMware vCloud Director through its APIs, the Web Console (written using Adobe Flex), the vApp transfer service, and the virtual machine remote console. A remote user who has no access rights to the system can attempt to gain access as an authorized user. Authenticated users of those interfaces can also be considered to be the sources of external threats, as they may try to exploit vulnerabilities in the system not available to unauthenticated users. .