critical9.8
CVE-2017-4917
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption.
Impact
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vsphere Data Protection | Versions 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98936
- http://www.securitytracker.com/id/1038617
- http://www.vmware.com/security/advisories/VMSA-2017-0010.html
- http://www.securityfocus.com/bid/98936
- http://www.securitytracker.com/id/1038617
- http://www.vmware.com/security/advisories/VMSA-2017-0010.html