CVE-2017-4919: Critical severity vmware vcenter vulnerability
Published Jul 28, 2017
·Updated
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.
Affected Software
3 affected components
VMware vCenter Server=5.5
VMware vCenter Server=6.0
VMware vCenter Server=6.5
Event History
Jul 28, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-4919?
CVE-2017-4919 has been assigned a medium severity rating, indicating a moderate risk for vCenter Server users.
2
How do I fix CVE-2017-4919?
To mitigate CVE-2017-4919, it is recommended to upgrade to a fixed version of VMware vCenter Server that addresses this vulnerability.
3
What versions of VMware vCenter Server are affected by CVE-2017-4919?
CVE-2017-4919 affects VMware vCenter Server versions 5.5, 6.0, and 6.5.
4
What is the impact of CVE-2017-4919 on vSphere users?
CVE-2017-4919 allows users with limited privileges to exploit the VIX API to access Guest Operating Systems without authentication.
5
Is there a workaround for CVE-2017-4919?
There are no official workarounds for CVE-2017-4919; upgrading to a non-vulnerable version is the recommended approach.