CVE-2017-4923

EPSS 0.81%
Veröffentlicht 01.08.2017 16:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle security@vmware.com
CVE-Watchlists
Login
Unerledigt
Login

VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ Vcenter Server Version6.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.81%	0.72

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

http://www.securitytracker.com/id/1039013

Third Party Advisory

VDB Entry

https://www.vmware.com/security/advisories/VMSA-2017-0013.html

Patch

Vendor Advisory

http://www.securityfocus.com/bid/99997

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-4923

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-4923

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-4923

EUVD