CVE-2019-5538

CVE-2019-5538 concerns a lack of certificate validation during VMware vCenter Server Appliance File-Based Backup and Restore, enabling a man-in-the-middle to intercept data in transit over SCP. Affected products are VMware vCenter Server Appliance 6.7 (before 6.7u3a) and 6.5 (before 6.5u3d). The ...

CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

VMSA-2019-0018:VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions

VMware Security Advisories Advisory ID| VMSA-2019-0018 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.8 Synopsis| VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions CVE-2019-5537, CVE-2019-5538 Issue Date| 2019-10-24...