Lucene search

[email protected]CVE-2010-0686

HistoryApr 01, 2010 - 7:30 p.m.

CVE-2010-0686

2010-04-0119:30:00

CWE-20

[email protected]

web.nvd.nist.gov

vmware

virtualcenter

server

esx

cve-2010-0686

webaccess

proxy server

url forwarding

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a “URL forwarding vulnerability.”

Affected configurations

NVD

Node

vmwarevirtualcenterMatch2.0.2

vmwarevirtualcenterMatch2.5

Node

vmwareserverMatch2.0.0

Node

vmwareesx_serverMatch3.0.3

vmwareesx_serverMatch3.5

CPENameOperatorVersion
vmware:virtualcentervmware virtualcentereq2.0.2
vmware:virtualcentervmware virtualcentereq2.5

CPE	Name	Operator	Version
vmware:virtualcenter	vmware virtualcenter	eq	2.0.2
vmware:virtualcenter	vmware virtualcenter	eq	2.5

References

lists.vmware.com/pipermail/security-announce/2010/000086.html

www.securityfocus.com/bid/39037

www.securitytracker.com/id?1023769

www.vmware.com/security/advisories/VMSA-2010-0005.html

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Related for CVE-2010-0686

prion1 seebug2 nvd1 cvelist1 openvas4 securityvulns2 vmware1