PT-2017-16201
CVE-2017-4917
·
تاريخ النشر
2017-06-07
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VMware vSphere Data Protection versions 5.5.x through 6.1.x
Description
The issue allows plaintext credentials to be obtained because VMware vSphere Data Protection locally stores vCenter Server credentials using reversible encryption.
Recommendations
For versions 5.5.x through 6.1.x, consider disabling the storage of vCenter Server credentials or restricting access to the reversible encryption mechanism until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾