CVE-2014-1210: Medium severity VMware vSphere Client vulnerability
Published Apr 11, 2014
·Updated
VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.
Affected Software
2 affected components
VMware vSphere Client=5.0
VMware vSphere Client=5.1
Event History
Apr 11, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1210?
CVE-2014-1210 is rated as a medium severity vulnerability.
2
How do I fix CVE-2014-1210?
To fix CVE-2014-1210, upgrade VMware vSphere Client to version 5.0 Update 3 or 5.1 Update 2 or later.
3
What types of attacks does CVE-2014-1210 allow?
CVE-2014-1210 allows man-in-the-middle attackers to spoof SSL servers using a crafted X.509 certificate.
4
What versions of VMware vSphere Client are affected by CVE-2014-1210?
CVE-2014-1210 affects VMware vSphere Client versions 5.0 prior to Update 3 and 5.1 prior to Update 2.
5
What are the impacts of exploiting CVE-2014-1210?
Exploiting CVE-2014-1210 can lead to unauthorized access to sensitive data through SSL spoofing.