PT-2017-16201 · Vmware · Vcenter Server+1

Publicado 2017-06-07 · Atualizado 2019-10-03 · CVE-2017-4917

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware vSphere Data Protection versions 5.5.x through 6.1.x

Description The issue allows plaintext credentials to be obtained because VMware vSphere Data Protection locally stores vCenter Server credentials using reversible encryption.

Recommendations For versions 5.5.x through 6.1.x, consider disabling the storage of vCenter Server credentials or restricting access to the reversible encryption mechanism until a fix is available.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2017-4917

Produtos afetados

Vmware Vsphere Data Protection

Vcenter Server

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-4917 · Aviso do Fabricante
• http://securityfocus.com/bid/98936 · Nota
• http://vmware.com/security/advisories/VMSA-2017-0010.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-4917 · Nota de Segurança
• http://securitytracker.com/id/1038617 · Nota