3 results (0.002 seconds)

CVSS: 9.8EPSS: 8%CPEs: 22EXPL: 2

CVE-2017-4914 – VMware vSphere Data Protection 5.x/6.x - Java Deserialization

https://notcve.org/view.php?id=CVE-2017-4914

07 Jun 2017 — VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance. VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, y 5.5.x contiene un problema de deserialización que permitiría a un atacante remoto ejecutar comandos en el aparato. • https://packetstorm.news/files/id/142901 • CWE-502: Deserialization of Untrusted Data •

CVSS: 10.0EPSS: 82%CPEs: 22EXPL: 1

CVE-2016-7456 – VMware VDP Known SSH Key

https://notcve.org/view.php?id=CVE-2016-7456

29 Dec 2016 — VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session. VMware vSphere Data Protection (VDP) 5.5.x hasta la versión 6.1.x tiene una clave privada SSH con una contraseña públicamente conocida, lo que hace más fácil a atacantes remotos obtener acceso de inicio de sesión a través de una sesión SSH. VMware vSphere Data Protection appliances 5.5.x through 6.1.x contain a kn... • https://packetstorm.news/files/id/143883 • CWE-255: Credentials Management Errors •

CVSS: 7.4EPSS: 0%CPEs: 6EXPL: 0

CVE-2014-4632 – VMware Security Advisory 2015-0002

https://notcve.org/view.php?id=CVE-2014-4632

30 Jan 2015 — VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoof servers, and bypass intended backup and restore access restrictions, via a crafted certificate. vSphere Data Protection (VDP) versión 5.1, versiones 5.5 anteriores a 5.5.9 y versiones 5.8 anteriores a 5.8.1 ... • http://archives.neohapsis.com/archives/bugtraq/2015-01/0154.html • CWE-310: Cryptographic Issues •