CVE-2015-6932

Опубликовано: 18 сент. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Ссылки

http://www.securitytracker.com/id/1033582
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2015-0006.html
Vendor Advisory
http://www.securitytracker.com/id/1033582
Third Party Advisory
VDB Entry
http://www.vmware.com/security/advisories/VMSA-2015-0006.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:vcenter_server:5.5:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:1:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:1a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:1b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:1c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:2:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:2b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:2d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:5.5:2e:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.0:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.0:a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.0:b:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00174

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-g328-m8jq-63j6

github

больше 3 лет назад