Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8371
HistoryDec 08, 2014 - 11:59 a.m.

CVE-2014-8371

2014-12-0811:59:08
CWE-310
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%

JSON

VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.

Affected configurations

NVD
Node
vmwarevcenter_server_applianceMatch5.0update_1
OR
vmwarevcenter_server_applianceMatch5.0update_2
OR
vmwarevcenter_server_applianceMatch5.0update_3
OR
vmwarevcenter_server_applianceMatch5.0update_3a
OR
vmwarevcenter_server_applianceMatch5.1
OR
vmwarevcenter_server_applianceMatch5.1update_1
OR
vmwarevcenter_server_applianceMatch5.1update_2
OR
vmwarevcenter_server_applianceMatch5.5
OR
vmwarevcenter_server_applianceMatch5.5update_1

Related

prion 1
cve 1
cvelist 1
threatpost 1
securityvulns 2
openvas 3
nessus 2
vmware 2
prion
prion
Code injection
2014-12-08 11:59:00
cve
cve
CVE-2014-8371
2014-12-08 11:59:08
cvelist
cvelist
CVE-2014-8371
2014-12-08 11:00:00
threatpost
threatpost
VMware Releases Patches for XSS, Cert. Validation Issue
2014-12-08 15:08:01
securityvulns
securityvulns
VMware vSphere multiple security vulnerabilities
2014-12-11 00:00:00
NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
2014-12-11 00:00:00
openvas
openvas
VMware ESXi updates address security vulnerabilities (VMSA-2014-0012) - Remote Version Check
2014-12-05 00:00:00
VMware ESXi product updates address security vulnerabilities (VMSA-2014-0012)
2014-12-05 00:00:00
VMware Security Updates for vCenter Server (VMSA-2014-0012)
2014-12-05 00:00:00
nessus
nessus
VMSA-2014-0012 : VMware vSphere product updates address security vulnerabilities
2014-12-06 00:00:00
VMware Security Updates for vCenter Server (VMSA-2014-0012)
2014-12-12 00:00:00
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%

JSON
Related for NVD:CVE-2014-8371
prion1cve1cvelist1threatpost1securityvulns2openvas3nessus2vmware2