CVE-2014-8373
First published: Thu Dec 11 2014(Updated: )
The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the "Connect (by) Using VMRC" function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware vCloud Automation Center | =6.0.1 | |
| VMware vCloud Automation Center | =6.0.1.1 | |
| VMware vCloud Automation Center | =6.0.1.2 | |
| VMware vCloud Automation Center | =6.1 | |
| VMware vCloud Automation Center | =6.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html
- http://seclists.org/fulldisclosure/2014/Dec/33
- http://secunia.com/advisories/61169
- http://www.securityfocus.com/archive/1/534186/100/0/threaded
- http://www.securitytracker.com/id/1031323
- http://www.vmware.com/security/advisories/VMSA-2014-0013.html
Frequently Asked Questions
What is the severity of CVE-2014-8373?
CVE-2014-8373 has a medium severity rating due to its allowance for privilege escalation for authenticated users.
How do I fix CVE-2014-8373?
To address CVE-2014-8373, it is recommended to upgrade VMware vCloud Automation Center to version 6.1.2 or later.
What type of vulnerability is CVE-2014-8373?
CVE-2014-8373 is a privilege escalation vulnerability affecting the VMware Remote Console functionality.
Who is impacted by CVE-2014-8373?
Remote authenticated users of VMware vCloud Automation Center versions 6.0.1 to 6.1.1 are impacted by CVE-2014-8373.
When was CVE-2014-8373 disclosed?
CVE-2014-8373 was disclosed in December 2014, following security advisories regarding its impact.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- vendor/vmware
- canonical/vmware vcloud automation center
- version/vmware vcloud automation center/6.0.1
- version/vmware vcloud automation center/6.0.1.1
- version/vmware vcloud automation center/6.0.1.2
- version/vmware vcloud automation center/6.1
- version/vmware vcloud automation center/6.1.1