// For flags

CVE-2017-4952

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.

VMware Xenon en versiones 1.x anteriores a la 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1 y 1.5.4_8, contiene una vulnerabilidad de omisión de autenticación debido a los controles de acceso insuficiente para los endpoints de la utilidad. Una explotación exitosa de esta vulnerabilidad podría resultar en un escalado de privilegios.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-12-26 CVE Reserved
  • 2018-05-02 CVE Published
  • 2024-04-10 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
>= 1.0.0 <= 1.5.3
Search vendor "Vmware" for product "Xenon" and version " >= 1.0.0 <= 1.5.3"
-
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.1.0
Search vendor "Vmware" for product "Xenon" and version "1.1.0"
cr0-3
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.1.0
Search vendor "Vmware" for product "Xenon" and version "1.1.0"
cr3_1
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.3.7
Search vendor "Vmware" for product "Xenon" and version "1.3.7"
cr1_2
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.4.2
Search vendor "Vmware" for product "Xenon" and version "1.4.2"
cr4_1
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr2
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr3
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr4
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr5
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr6
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr6_1
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr6_2
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4
Search vendor "Vmware" for product "Xenon" and version "1.5.4"
cr7
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.4_8
Search vendor "Vmware" for product "Xenon" and version "1.5.4_8"
-
Affected
Vmware
Search vendor "Vmware"
Xenon
Search vendor "Vmware" for product "Xenon"
1.5.7_7
Search vendor "Vmware" for product "Xenon" and version "1.5.7_7"
-
Affected