Lucene search
K

8 matches found

Circl
Circl
added 2018/05/29 3:50 p.m.14 views

CVE-2016-7456

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vmwarevdpknownprivkey.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:50+00:00| seen|...

10CVSS9.3AI score0.32789EPSS
Exploits3References1
0day.today
0day.today
added 2017/08/22 12:0 a.m.56 views

VMware VDP Known SSH Key Exploit

VMware vSphere Data Protection appliances 5.5.x through 6.1.x contain a known ssh private key for the local user admin who is a sudoer without password. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh'...

10CVSS9AI score0.32789EPSS
Exploits3
Metasploit
Metasploit
added 2017/01/03 8:36 a.m.50 views

VMware VDP Known SSH Key

VMware vSphere Data Protection appliances 5.5.x through 6.1.x contain a known ssh private key for the local user admin who is a sudoer without password. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh...

9.8CVSS9.4AI score0.32789EPSS
Exploits3
CVE
CVE
added 2016/12/29 9:2 a.m.71 views

CVE-2016-7456

Affected product/versions: VMware vSphere Data Protection appliances 5.5.x through 6.1.x. Vulnerability cause: SSH private key used by the local admin (sudoer) has a publicly known password, enabling key-based SSH access. Impact: Remote attacker could gain login access via SSH, potentially compro...

10CVSS9.1AI score0.32789EPSS
Exploits3References3Affected Software1
OpenVAS
OpenVAS
added 2016/12/28 12:0 a.m.55 views

VMware vSphere Data Protection (VDP) updates address SSH Key-Based authentication issue (VMSA-2016-0024, admin_key) - Active Check

VMware vSphere Data Protection VDP updates address SSH key-based authentication issue. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS8.6AI score0.32789EPSS
Exploits3References1
OpenVAS
OpenVAS
added 2016/12/28 12:0 a.m.55 views

VMware vSphere Data Protection (VDP) updates address SSH Key-Based authentication issue (VMSA-2016-0024, dpnid) - Active Check

VMware vSphere Data Protection VDP updates address SSH key-based authentication issue. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS8.6AI score0.32789EPSS
Exploits3References1
VMware
VMware
added 2016/12/20 12:0 a.m.40 views

vSphere Data Protection (VDP) update addresses SSH key-based authentication issue

VDP SSH key-based authentication issue VDP contains a private SSH key with a known password that is configured to allow key-based authentication. Exploitation of this issue may allow an unauthorized remote attacker to log into the appliance with root privileges. VMware would like to thank Marc...

10CVSS3.2AI score0.32789EPSS
Exploits3References1Affected Software1
VMware
VMware
added 2016/12/18 12:0 a.m.434 views

VMSA-2016-0024:vSphere Data Protection (VDP) update addresses SSH key-based authentication issue

VMSA-2016-0024.1 vSphere Data Protection VDP updates address SSH Key-Based authentication issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0024.1 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: vSphere Data Protection VDP updates addres...

10CVSS9.9AI score0.32789EPSS
Exploits3References8Affected Software1
Rows per page
Query Builder