CVE-2019-11242: High severity cohesity dataplatform vulnerability
Published Jul 12, 2019
·Updated
A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.
Affected Software
1 affected component
Cohesity DataPlatform>=5.0<6.1.1c
Event History
Jul 12, 2019
CVE Published
via MITRE·07:04 PM
Data Sourced
via MITRE·07:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11242?
CVE-2019-11242 has a medium severity rating due to potential exposure of user credentials.
2
How do I fix CVE-2019-11242?
To mitigate CVE-2019-11242, upgrade Cohesity DataPlatform to version 6.1.1c or later.
3
What systems are affected by CVE-2019-11242?
CVE-2019-11242 affects Cohesity DataPlatform versions 5.x and 6.x prior to 6.1.1c.
4
What type of vulnerability is CVE-2019-11242?
CVE-2019-11242 is a man-in-the-middle vulnerability related to vCenter access.
5
What implications does CVE-2019-11242 have for users?
CVE-2019-11242 could expose user credentials configured for accessing vCenter, posing security risks.