CVE-2015-2342

Description

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

92.031

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in VMware vCenter 5.0	Windows
Multiple Vulnerabilities are affected in VMware vCenter 5.1	Windows
Multiple Vulnerabilities are affected in VMware vCenter 5.5	Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.0	Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 5.0	Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 5.1	Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 5.5	Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234