CVE-2017-4919

EPSS 2.04%
Veröffentlicht 28.07.2017 22:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ vCenter Server Version 5.5

VMware ≫ vCenter Server Version 6.0

VMware ≫ vCenter Server Version 6.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.04%	0.786

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9	2.2	6	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

http://www.securityfocus.com/bid/100102

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1039004

Third Party Advisory

VDB Entry

http://www.vmware.com/security/advisories/VMSA-2017-0012.html

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-4919

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-4919

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-4919

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-4919