CVE-2014-4632 | BDVDB-2026-67778 Detail

Description#

VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly verify X.509 certificates from vCenter Server SSL servers, which allows man-in-the-middle attackers to spoof servers, and bypass intended backup and restore access restrictions, via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vmware.com/security/advisories/VMSA-2015-0002.html
http://archives.neohapsis.com/archives/bugtraq/2015-01/0154.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/100866
http://www.securitytracker.com/id/1031664

Exploit#

No public exploit known

History#

Version 12015-02-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.