Skip to content

CVE-2016-7456 VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

CriticalCVSS 9.8 EPSS 32.8% Framework module
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

Affected products

ProductAffected versionsFixed in
VMware vsphere data protection = 5.5.1 No fix listed
VMware vsphere data protection = 5.5.5 No fix listed
VMware vsphere data protection = 5.5.6 No fix listed
VMware vsphere data protection = 5.5.7 No fix listed
VMware vsphere data protection = 5.5.8 No fix listed
VMware vsphere data protection = 5.5.9 No fix listed
VMware vsphere data protection = 5.5.10 No fix listed
VMware vsphere data protection = 5.5.11 No fix listed
VMware vsphere data protection = 5.8.0 No fix listed
VMware vsphere data protection = 5.8.1 No fix listed
VMware vsphere data protection = 5.8.2 No fix listed
VMware vsphere data protection = 5.8.3 No fix listed
VMware vsphere data protection = 5.8.4 No fix listed
VMware vsphere data protection = 6.0.0 No fix listed
VMware vsphere data protection = 6.0.1 No fix listed
VMware vsphere data protection = 6.0.2 No fix listed
VMware vsphere data protection = 6.0.3 No fix listed
VMware vsphere data protection = 6.0.4 No fix listed
VMware vsphere data protection = 6.1.0 No fix listed
VMware vsphere data protection = 6.1.1 No fix listed
VMware vsphere data protection = 6.1.2 No fix listed
VMware vsphere data protection = 6.1.3 No fix listed

References