CVE

Id
75672  
CVE No.
CVE-2014-8371  
Status
Candidate  
Description
VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.  
Phase
Assigned (20141021)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700496 75672 CVE-2014-8371 BUGTRAQ:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
700497 75672 CVE-2014-8371 URL:http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded  View
700498 75672 CVE-2014-8371 FULLDISC:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
700499 75672 CVE-2014-8371 URL:http://seclists.org/fulldisclosure/2014/Dec/23  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16171 JVNDB-2014-005046 Drupal 用 Marketo MA モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Marketo MA モジュールには、(1) Webform または (2) User サブモジュールのフィールドタイトルに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8379 75672 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005046.html  View