CVE-2014-3796 VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware nsx | = 6.0 | No fix listed |
| VMware nsx | = 6.0.1 | No fix listed |
| VMware nsx | = 6.0.2 | No fix listed |
| VMware nsx | = 6.0.3 | No fix listed |
| VMware nsx | = 6.0.4 | No fix listed |
| VMware nsx | = 6.0.5 | No fix listed |
| VMware vcloud networking and security | = 5.1 | No fix listed |
| VMware vcloud networking and security | = 5.1.1 | No fix listed |
| VMware vcloud networking and security | = 5.1.2 | No fix listed |
| VMware vcloud networking and security | = 5.1.3 | No fix listed |
| VMware vcloud networking and security | = 5.1.4 | No fix listed |
| VMware vcloud networking and security | = 5.1.4.1 | No fix listed |
| VMware vcloud networking and security | = 5.5 | No fix listed |
| VMware vcloud networking and security | = 5.5.0a | No fix listed |
| VMware vcloud networking and security | = 5.5.1 | No fix listed |
| VMware vcloud networking and security | = 5.5.2 | No fix listed |
| VMware vcloud networking and security | = 5.5.2.1 | No fix listed |
References
- 59938 third-party-advisory
- 1030835 vdb-entry
- www.vmware.com patch vendor-advisory
- vmware-vcns-cve20143796-info-disc(95926) vdb-entry