Lucene search

K
vmwareVMwareVMSA-2016-0024
HistoryDec 20, 2016 - 12:00 a.m.

vSphere Data Protection (VDP) updates address SSH Key-Based authentication issue

2016-12-2000:00:00
www.vmware.com
406

0.083 Low

EPSS

Percentile

94.4%

**VDP SSH key-based authentication issue **

VDP contains a private SSH key with a known password that is configured to allow key-based authentication. Exploitation of this issue may allow an unauthorized remote attacker to log into the appliance with root privileges.

VMware would like to thank Marc StrΓΆbel aka phroxvs from HvS-Consulting for reporting this issue to VMware.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-7456 to this issue.

Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.

0.083 Low

EPSS

Percentile

94.4%