medium4.3
CVE-2014-8371
VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecti…
Impact
VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vcenter Server Appliance | Versions 5.0, 5.1, 5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html