Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-2342
HistoryOct 12, 2015 - 10:59 a.m.

CVE-2015-2342

2015-10-1210:59:01
[email protected]
web.nvd.nist.gov
3

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.972

Percentile

99.8%

JSON

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Affected configurations

Nvd
Node
vmwarevcenter_serverMatch5.0
OR
vmwarevcenter_serverMatch5.1
OR
vmwarevcenter_serverMatch5.5
OR
vmwarevcenter_serverMatch6.0
VendorProductVersionCPE
vmwarevcenter_server5.0cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*
vmwarevcenter_server5.1cpe:2.3:a:vmware:vcenter_server:5.1:*:*:*:*:*:*:*
vmwarevcenter_server5.5cpe:2.3:a:vmware:vcenter_server:5.5:*:*:*:*:*:*:*
vmwarevcenter_server6.0cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:*

Related

zdi 1
prion 1
exploitdb 1
metasploit 2
threatpost 1
cve 1
cvelist 1
nessus 5
openvas 3
vmware 2
zdi
zdi
VMware vCenter Server JMX RMI Remote Code Execution Vulnerability
2015-10-02 00:00:00
prion
prion
Design/Logic Flaw
2015-10-12 10:59:00
exploitdb
exploitdb
Java JMX - Server Insecure Configuration Java Code Execution (Metasploit)
2015-02-17 00:00:00
metasploit
metasploit
Java JMX Server Insecure Endpoint Code Execution Scanner
2018-07-30 20:25:15
Java JMX Server Insecure Configuration Java Code Execution
2015-03-18 20:55:52
threatpost
threatpost
VMware vCenter Server Patch Reissue
2016-02-15 11:00:41
cve
cve
CVE-2015-2342
2015-10-12 10:59:01
cvelist
cvelist
CVE-2015-2342
2015-10-12 10:00:00
nessus
nessus
VMware vCenter Multiple Vulnerabilities (VMSA-2015-0007)
2015-10-02 00:00:00
VMware ESXi 5.5 < Build 3029944 OpenSLP RCE (VMSA-2015-0007)
2015-11-19 00:00:00
VMware ESXi 5.0 < Build 3021432 OpenSLP RCE (VMSA-2015-0007)
2015-11-19 00:00:00
openvas
openvas
VMware vCenter Server Multiple Vulnerabilities (VMSA-2015-0007)
2015-10-05 00:00:00
VMware ESXi OpenSLP Remote Code Execution (VMSA-2015-0007)
2015-10-05 00:00:00
VMware ESXi OpenSLP Remote Code Execution (VMSA-2015-0007) - Remote Version Check
2015-10-05 00:00:00
vmware
vmware
VMware vCenter and ESXi updates address critical security issues.
2015-10-01 00:00:00
VMware vCenter and ESXi updates address critical security issues.
2015-10-01 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.972

Percentile

99.8%

JSON
Related for NVD:CVE-2015-2342
zdi1prion1exploitdb1metasploit2threatpost1cve1cvelist1nessus5openvas3vmware2