7.5

CVE-2017-4952

VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Xenon Version >= 1.0.0 <= 1.5.3
VMware ≫ Xenon Version1.1.0 Updatecr0-3
VMware ≫ Xenon Version1.1.0 Updatecr3_1
VMware ≫ Xenon Version1.3.7 Updatecr1_2
VMware ≫ Xenon Version1.4.2 Updatecr4_1
VMware ≫ Xenon Version1.5.4 Updatecr2
VMware ≫ Xenon Version1.5.4 Updatecr3
VMware ≫ Xenon Version1.5.4 Updatecr4
VMware ≫ Xenon Version1.5.4 Updatecr5
VMware ≫ Xenon Version1.5.4 Updatecr6
VMware ≫ Xenon Version1.5.4 Updatecr6_1
VMware ≫ Xenon Version1.5.4 Updatecr6_2
VMware ≫ Xenon Version1.5.4 Updatecr7
VMware ≫ Xenon Version1.5.4_8
VMware ≫ Xenon Version1.5.7_7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.94% 0.891
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://seclists.org/oss-sec/2018/q1/153
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/103093
Third Party Advisory
VDB Entry
https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977
Patch
Third Party Advisory
https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3
Patch
Third Party Advisory