NVD

Id
24401  
Name
CVE-2015-2342  
Description
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-10-12  
Modified Date
2016-12-07  
Seq
2015-2342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129144 24401 CVE-2015-2342 20151001 CVE-2015-2342 VMware vCenter Remote Code Execution  View
129145 24401 CVE-2015-2342 1033720  View
129146 24401 CVE-2015-2342 http://www.vmware.com/security/advisories/VMSA-2015-0007.html  View
129147 24401 CVE-2015-2342 http://www.zerodayinitiative.com/advisories/ZDI-15-455  View
129148 24401 CVE-2015-2342 https://www.7elements.co.uk/resources/technical-advisories/cve-2015-2342-vmware-vcenter-remote-code-execution/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9862 JVNDB-2015-005182 VMware vCenter Server の JMX RMI サービスにおける任意のコードを実行される脆弱性 VMware vCenter Server の JMX RMI サービスは、MBeans の登録を制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2015-2342 79567 CVE-2015-2342 24401 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005182.html 2015-10-01 2015-10-14 View