Design/Logic Flaw

2015-09-1822:59:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.4%

JSON

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
vcenter_servereq6.0 a
vcenter_servereq6.0 b
vcenter_servereq5.5 1
vcenter_servereq5.5 1a
vcenter_servereq5.5 1b
vcenter_servereq5.5 1c
vcenter_servereq5.5 2
vcenter_servereq5.5 2b
vcenter_servereq5.5 2d
vcenter_servereq5.5 2e

Name	Operator	Version
vcenter_server	eq	6.0 a
vcenter_server	eq	6.0 b
vcenter_server	eq	5.5 1
vcenter_server	eq	5.5 1a
vcenter_server	eq	5.5 1b
vcenter_server	eq	5.5 1c
vcenter_server	eq	5.5 2
vcenter_server	eq	5.5 2b
vcenter_server	eq	5.5 2d
vcenter_server	eq	5.5 2e