EUVD-2019-15113

Malware in sbrugna...

CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

CVE-2019-5537

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over FTP...

CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

Information disclosure

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

Information disclosure

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over FTP...

CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

CVE-2019-5537

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over FTP...

CVE-2019-5537

Vulnerability: CVE-2019-5537 affects VMware vCenter Server Appliance 6.7 (before 6.7u3a) and 6.5 (before 6.5u3d), arising from lack of certificate validation in File-Based Backup and Restore, enabling an MITM attacker to intercept data in transit over FTPS/HTTPS. Connected advisory VMSA-2019-0018...

CVE-2019-5538: Improper Certificate Validation

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

PT-2019-4033

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance versions 6.7 before 6.7u3a VMware vCenter Server Appliance versions 6.5 before 6.5u3d Description The issue is related to a lack of certificate validation during File-Based Backup and Restore operations, which m...

PT-2019-4032

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance versions 6.7 before 6.7u3a VMware vCenter Server Appliance versions 6.5 before 6.5u3d Description The issue is related to a lack of certificate validation during File-Based Backup and Restore operations, which m...

VMSA-2019-0018:VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions

VMware Security Advisories Advisory ID| VMSA-2019-0018 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.8 Synopsis| VMware vCenter Server Appliance updates address sensitive information disclosure vulnerability in backup and restore functions CVE-2019-5537, CVE-2019-5538 Issue Date| 2019-10-24...

CVE-2017-4923

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...

Information disclosure

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...

CVE-2017-4923

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...

CVE-2017-4923: Exposure of Sensitive Information to an Unauthorized Actor

VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...

PT-2017-16206

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 prior to 6.5 U1 Description The issue is an information disclosure vulnerability that may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature...

VMware vCenter Server Appliance 6.5 < 6.5 U1 Multiple Vulnerabilities (VMSA-2017-0013)

The version of VMware vCenter Server Appliance installed on the remote host is 6.5 prior to 6.5 Update 1 6.5 U1. It is, therefore, affected by multiple vulnerabilities : - An insecure library loading issue exists due to the use of the LDLIBRARYPATH variable to look for specific files or libraries...