JVN Info.

Id
27701  
Name
JVNDB-2012-003408  
Title
ASP-DEv XM Diary における SQL インジェクションの脆弱性  
Summary
ASP-DEv XM Diary には、SQL インジェクションの脆弱性が存在します。  
Nvdinfo
CVE-2012-4061  
Cvssv2
7.5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003408.html  
Published Date
2012-07-25  
Registered Date
2012-07-30  
Last Updated Date
2012-07-30  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
56647 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 27701 86124 CVE-2015-6932 5.8 Medium 172.16.240.100 tcp 443 VMware vCenter 5.5 LDAP Certificate Validation MitM Spoofing (VMSA-2015-0006) The remote host has a virtualization management application installed that is affected by a man-in-the-middle spoofing vulnerability. The VMware vCenter Server installed on the remote host is version 5.5 prior to 5.5u3. It is, therefore, affected by a man-in-the-middle spoofing vulnerability due to improper validation of X.509 certificates from TLS LDAP servers. A remote, man-in-the-middle attacker can exploit this to intercept network traffic by spoofing a TLS server via a crafted certificate, resulting in the manipulation or disclosure of sensitive information. Upgrade to VMware vCenter Server 5.5u3 (5.5.0 build-3000241) or later. http://www.vmware.com/security/advisories/VMSA-2015-0006.html Installed version : 5.5.0 build-1945274 Fixed version : 5.5.0 build-3000241