PT-2015-7411 · Vmware · Vmware Vcenter Server+1

Publicado 2015-09-18 · Atualizado 2020-07-13 · CVE-2015-6932

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.5 before u3 and 6.0 before u1

Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted X.509 certificate, as the software does not verify X.509 certificates from TLS LDAP servers.

Recommendations For versions 5.5 before u3, update to version 5.5 u3 or later. For versions 6.0 before u1, update to version 6.0 u1 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2015-6932

Produtos afetados

Vmware Vcenter

Vmware Vcenter Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-6932 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6932 · Nota
• http://securitytracker.com/id/1033582 · Nota
• http://vmware.com/security/advisories/VMSA-2015-0006.html · Aviso do Fabricante