VMwareVMSA-2016-0005.5VMware product updates address critical and important security issues
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.071 Low
EPSS
Percentile
93.9%
a. Critical JMX issue when deserializing authentication credentials
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2077
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3427
kb.vmware.com/kb/2078735
lists.vmware.com/cgi-bin/mailman/listinfo/security-announce
www.vmware.com/security/advisories
www.vmware.com/security/advisories/VMSA-2015-0007.html
my.vmware.com/web/vmware/get-download?downloadGroup=VR5606
my.vmware.com/web/vmware/get-download?downloadGroup=VR5812
my.vmware.com/web/vmware/get-download?downloadGroup=VR6003
my.vmware.com/web/vmware/get-download?downloadGroup=VR611
twitter.com/VMwareSRC
www.vmware.com/go/download-vsphere
www.vmware.com/go/download/vcloud-director
www.vmware.com/go/downloadworkstation
www.vmware.com/support/policies/lifecycle.html
www.vmware.com/support/policies/security_response.html
www.vmware.com/support/pubs/vsphere-replication-pubs.htm
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.071 Low
EPSS
Percentile
93.9%