CVE-2017-4923: Infoleak
Published Aug 1, 2017
·Updated
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.
Affected Software
1 affected component
VMware vCenter Server=6.5
Remediation
Event History
Aug 1, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-4923?
CVE-2017-4923 is classified as a medium severity information disclosure vulnerability.
2
How do I fix CVE-2017-4923?
To fix CVE-2017-4923, you should upgrade to VMware vCenter Server version 6.5 U1 or later.
3
What impact does CVE-2017-4923 have?
CVE-2017-4923 may allow an attacker to obtain plaintext credentials through the file-based backup feature in vCenter Server.
4
Which versions of VMware are affected by CVE-2017-4923?
CVE-2017-4923 affects VMware vCenter Server 6.5 prior to version 6.5 U1.
5
Is there a workaround for CVE-2017-4923?
There are no official workarounds available for CVE-2017-4923; upgrading is the recommended solution.