CVE-2015-2342: Critical severity vmware vcenter vulnerability

Published Oct 12, 2015

Updated

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Affected Software

4 affected components

VMware vCenter Server=5.0

VMware vCenter Server=5.1

VMware vCenter Server=5.5

VMware vCenter Server=6.0

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2015-0007.html

Event History

Oct 12, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2342?

CVE-2015-2342 is rated as critical due to the potential for remote code execution.

How do I fix CVE-2015-2342?

To mitigate CVE-2015-2342, ensure that you upgrade to the patched versions of VMware vCenter Server as specified in the vendor's advisory.

What versions of VMware vCenter Server are affected by CVE-2015-2342?

CVE-2015-2342 affects VMware vCenter Server versions 5.0, 5.1, 5.5, and 6.0 prior to their respective updates.

Can CVE-2015-2342 be exploited remotely?

Yes, CVE-2015-2342 can be exploited remotely by attackers via the RMI protocol.

What impact does CVE-2015-2342 have on my VMware infrastructure?

Exploiting CVE-2015-2342 allows attackers to execute arbitrary code, potentially compromising the entire VMware environment.