CVE-2016-2079: Infoleak

Published Jul 3, 2016

Updated

VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors.

Affected Software

16 affected components

VMware NSX Edge=6.1.0

VMware NSX Edge=6.1.1

VMware NSX Edge=6.1.2

VMware NSX Edge=6.1.4

VMware NSX Edge=6.1.5

VMware NSX Edge=6.1.6

VMware NSX Edge=6.2.0

VMware NSX Edge=6.2.1

VMware NSX Edge=6.2.2

VMware Vcloud Networking And Security Edge=5.5.0

VMware Vcloud Networking And Security Edge=5.5.2.1

VMware Vcloud Networking And Security Edge=5.5.3

VMware Vcloud Networking And Security Edge=5.5.3.1

VMware Vcloud Networking And Security Edge=5.5.4

VMware Vcloud Networking And Security Edge=5.5.4.1

VMware Vcloud Networking And Security Edge=5.5.4.2

Remediation

Patch Available

http://www.vmware.com/security/advisories/VMSA-2016-0007.html

Event History

Jul 3, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2079?

CVE-2016-2079 has a severity rating that indicates it poses a risk of sensitive information exposure.

How do I fix CVE-2016-2079?

To fix CVE-2016-2079, upgrade your VMware NSX Edge to version 6.1.7 or 6.2.3, or vCNS Edge to version 5.5.4.3 or later.

What systems are affected by CVE-2016-2079?

CVE-2016-2079 affects VMware NSX Edge versions 6.1.0 to 6.1.6 and 6.2.0 to 6.2.2, as well as vCNS Edge versions 5.5.0 to 5.5.4.2.

What type of vulnerability is CVE-2016-2079?

CVE-2016-2079 is a vulnerability that allows remote attackers to obtain sensitive information via unspecified vectors when the SSL-VPN feature is configured.

Is there a workaround for CVE-2016-2079?

There is currently no known workaround for CVE-2016-2079; applying the necessary updates is the recommended mitigation.