PT-2017-16201
CVE-2017-4917
·
Published
2017-06-07
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VMware vSphere Data Protection versions 5.5.x through 6.1.x
Description
The issue allows plaintext credentials to be obtained because VMware vSphere Data Protection locally stores vCenter Server credentials using reversible encryption.
Recommendations
For versions 5.5.x through 6.1.x, consider disabling the storage of vCenter Server credentials or restricting access to the reversible encryption mechanism until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾