CVE-2015-2342
First published: Mon Oct 12 2015(Updated: )
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware vCenter | =5.0 | |
| VMware vCenter | =5.1 | |
| VMware vCenter | =5.5 | |
| VMware vCenter | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2015/Oct/1
- http://www.securityfocus.com/bid/76930
- http://www.securitytracker.com/id/1033720
- http://www.vmware.com/security/advisories/VMSA-2015-0007.html
- http://www.zerodayinitiative.com/advisories/ZDI-15-455
- https://www.7elements.co.uk/resources/technical-advisories/cve-2015-2342-vmware-vcenter-remote-code-execution/
Frequently Asked Questions
What is the severity of CVE-2015-2342?
CVE-2015-2342 is rated as critical due to the potential for remote code execution.
How do I fix CVE-2015-2342?
To mitigate CVE-2015-2342, ensure that you upgrade to the patched versions of VMware vCenter Server as specified in the vendor's advisory.
What versions of VMware vCenter Server are affected by CVE-2015-2342?
CVE-2015-2342 affects VMware vCenter Server versions 5.0, 5.1, 5.5, and 6.0 prior to their respective updates.
Can CVE-2015-2342 be exploited remotely?
Yes, CVE-2015-2342 can be exploited remotely by attackers via the RMI protocol.
What impact does CVE-2015-2342 have on my VMware infrastructure?
Exploiting CVE-2015-2342 allows attackers to execute arbitrary code, potentially compromising the entire VMware environment.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware vcenter
- version/vmware vcenter/5.0
- version/vmware vcenter/5.1
- version/vmware vcenter/5.5
- version/vmware vcenter/6.0