PT-2008-4908 · Vmware · Vmware Virtualcenter

Publicado 2008-08-13 · Atualizado 2018-10-11 · CVE-2008-3514

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware VirtualCenter versions 2.0.2 before Update 5 VMware VirtualCenter versions 2.5 before Update 2

Description The issue allows remote attackers to determine valid user names by exploiting the client-side access control mechanism. This is done by enabling functionality in the GUI and then attempting to assign permissions to other system users.

Recommendations For versions 2.0.2 before Update 5, update to Update 5 or later. For versions 2.5 before Update 2, update to Update 2 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2008-3514

Produtos afetados

Vmware Virtualcenter

Referências · 12

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3514 · Nota
• http://securityfocus.com/archive/1/495386/100/0/threaded · Nota
• http://securityfocus.com/bid/30664 · Nota
• http://securitytracker.com/id?1020693 · Nota
• http://vmware.com/support/vi3/doc/releasenotes_vc202u5.html · Nota
• http://insomniasec.com/advisories/ISVA-080812.1.htm · Nota
• http://vupen.com/english/advisories/2008/2363 · Aviso do Fabricante
• http://securityreason.com/securityalert/4150 · Nota
• http://secunia.com/advisories/31468 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44425 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3514 · Nota de Segurança
• http://vmware.com/security/advisories/VMSA-2008-0012.html · Aviso do Fabricante