PT-2019-4334 · Vmware · Vmware Vcenter Server+1
Publicado
2019-09-16
·
Atualizado
2022-04-22
·
CVE-2019-5532
CVSS v3.1
7.7
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
VMware vCenter Server versions 6.7.x prior to 6.7 U3
VMware vCenter Server version 6.5 prior to 6.5 U3
VMware vCenter Server version 6.0 prior to 6.0 U3j
Description
The issue is related to the logging of credentials in plain-text for virtual machines deployed through OVF. A malicious user with access to the log files containing vCenter OVF-properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF, typically the root account of the virtual machine. This is due to insufficient protection of registration data, which can allow a remote attacker to gain access to user credentials.
Recommendations
For versions 6.7.x prior to 6.7 U3, update to version 6.7 U3 or later to resolve the issue.
For version 6.5 prior to 6.5 U3, update to version 6.5 U3 or later to resolve the issue.
For version 6.0 prior to 6.0 U3j, update to version 6.0 U3j or later to resolve the issue.
As a temporary workaround, consider restricting access to the log files containing vCenter OVF-properties to minimize the risk of exploitation.
Correção
Insufficiently Protected Credentials
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Vmware Vcenter
Vmware Vcenter Server