NVD

Id
41186  
Name
CVE-2013-5973  
Description
VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-23  
Modified Date
2014-01-07  
Seq
2013-5973  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
208586 41186 CVE-2013-5973 JVN#13154935  View
208587 41186 CVE-2013-5973 JVNDB-2013-000123  View
208588 41186 CVE-2013-5973 20131223 NEW VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX  View
208589 41186 CVE-2013-5973 64491  View
208590 41186 CVE-2013-5973 1029529  View
208591 41186 CVE-2013-5973 http://www.vmware.com/security/advisories/VMSA-2013-0016.html  View
208592 41186 CVE-2013-5973 vmware-esx-esxi-cve20135973-sec-bypass(89938)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19423 JVNDB-2013-000123 VMware ESX および ESXi において任意のファイルにアクセス可能な問題 VMware ESX および ESXi には、仮想マシンファイル記述子の処理に問題が存在し、ESX または ESXi の任意のファイルにアクセス可能な問題が存在します。 CVE-2013-5973 65915 CVE-2013-5973 41186 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000123.html 2013-12-24 2013-12-25 View