CVE-2010-4573

Опубликовано: 22 дек. 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.

Ссылки

http://kb.vmware.com/kb/1031761
http://lists.vmware.com/pipermail/security-announce/2010/000114.html
http://secunia.com/advisories/42591
Vendor Advisory
http://securitytracker.com/id?1024917
http://www.securityfocus.com/archive/1/515420/100/0/threaded
http://www.securityfocus.com/bid/45543
http://www.vmware.com/security/advisories/VMSA-2010-0020.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3303
Vendor Advisory
http://kb.vmware.com/kb/1031761
http://lists.vmware.com/pipermail/security-announce/2010/000114.html
http://secunia.com/advisories/42591
Vendor Advisory
http://securitytracker.com/id?1024917
http://www.securityfocus.com/archive/1/515420/100/0/threaded
http://www.securityfocus.com/bid/45543
http://www.vmware.com/security/advisories/VMSA-2010-0020.html
Vendor Advisory
http://www.vupen.com/english/advisories/2010/3303
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vmware:esxi:4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02037

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-76jq-8wqx-96ch

github

больше 3 лет назад