PT-2011-1384 · Vmware · Vmware Vcenter Server+1

Claudio Criscione · Publicado 2011-02-16 · Atualizado 2018-10-10 · CVE-2010-2928

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter Server version 4.1 before Update 1

Description The issue concerns the storage of log-on credentials in a configuration file by the vCenter Tomcat Management Application. This allows local users to gain privileges by reading the file, potentially leading to unauthorized access.

Recommendations For VMware vCenter Server version 4.1 before Update 1, apply Update 1 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-2928

Produtos afetados

Vmware Vcenter

Vmware Vcenter Server

Referências · 8

• http://vmware.com/security/advisories/VMSA-2011-0003.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2928 · Nota
• http://vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html · Nota
• http://secunia.com/advisories/43307 · Aviso do Fabricante
• http://securityreason.com/securityalert/8079 · Nota
• http://securityfocus.com/archive/1/516397/100/0/threaded · Nota
• http://osvdb.org/70859 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2928 · Nota de Segurança