CVE-2015-4057 | BDVDB-2026-81990 Detail

Description#

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2015/Jun/91

Exploit#

No public exploit known

History#

Version 12017-02-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.