CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...

CVE-2015-4056

CVE-2015-4056 affects VCE Vision Intelligent Operations prior to 2.6.5, where the System Library uses a weak cryptographic scheme that can allow an authenticated administrator to access sensitive credentials. The issue is documented across multiple sources (NVD, CVE list, and Vulners security adv...

CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network...