NVD

Id
3387  
Name
CVE-2008-3514  
Description
VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other system users."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-08-13  
Modified Date
2011-03-16  
Seq
2008-3514  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21264 3387 CVE-2008-3514 4150  View
21265 3387 CVE-2008-3514 http://www.insomniasec.com/advisories/ISVA-080812.1.htm  View
21266 3387 CVE-2008-3514 20080812 VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability  View
21267 3387 CVE-2008-3514 30664  View
21268 3387 CVE-2008-3514 1020693  View
21269 3387 CVE-2008-3514 http://www.vmware.com/security/advisories/VMSA-2008-0012.html  View
21270 3387 CVE-2008-3514 http://www.vmware.com/support/vi3/doc/releasenotes_vc202u5.html  View
21271 3387 CVE-2008-3514 ADV-2008-2363  View
21272 3387 CVE-2008-3514 virtualcenter-backend-info-disclosure(44425)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47148 JVNDB-2008-002458 VMware VirtualCenter における他のシステムユーザに権限を割り当てられる脆弱性 VMware VirtualCenter は、クライアントサイドのアクセスコントロールの有効/無効機能に依存するため、 GUI を有効にすることにより、ユーザ名を見つけ出され、他のシステムユーザに権限を割り当てられる脆弱性が存在します。 CVE-2008-3514 33627 CVE-2008-3514 3387 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002458.html 2008-08-12 2010-09-13 View