Security Advisory

CVE-2014-8371

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-12-08 11:00:00

Last updated 2024-08-06 13:18:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.

← Browse all CVEs View on cve.org ↗