Home

CVE-2015-6932

Description

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Risk Information

Base Score
4.8
MODERATE
Vector
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.174

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in VMware vCenter 5.5Windows
Multiple Vulnerabilities are affected in VMware vCenter 6.0Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 5.5Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 6.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234