CVE-2017-4917

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.

Weaknesses (CWE)

CWE-327

Affected Products (21)

vmware · vsphere_data_protectionvulnerable

References (6)

http://www.securityfocus.com/bid/98936

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038617

http://www.vmware.com/security/advisories/VMSA-2017-0010.html

PatchVendor Advisory

http://www.securityfocus.com/bid/98936

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038617

http://www.vmware.com/security/advisories/VMSA-2017-0010.html

PatchVendor Advisory