CVE-2017-4917 VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
CriticalCVSS 9.8
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vsphere data protection | = 5.5.5 | No fix listed |
| VMware vsphere data protection | = 5.5.6 | No fix listed |
| VMware vsphere data protection | = 5.5.7 | No fix listed |
| VMware vsphere data protection | = 5.5.8 | No fix listed |
| VMware vsphere data protection | = 5.5.9 | No fix listed |
| VMware vsphere data protection | = 5.5.10 | No fix listed |
| VMware vsphere data protection | = 5.5.11 | No fix listed |
| VMware vsphere data protection | = 5.8.0 | No fix listed |
| VMware vsphere data protection | = 5.8.1 | No fix listed |
| VMware vsphere data protection | = 5.8.2 | No fix listed |
| VMware vsphere data protection | = 5.8.3 | No fix listed |
| VMware vsphere data protection | = 5.8.4 | No fix listed |
| VMware vsphere data protection | = 6.0.0 | No fix listed |
| VMware vsphere data protection | = 6.0.1 | No fix listed |
| VMware vsphere data protection | = 6.0.2 | No fix listed |
| VMware vsphere data protection | = 6.0.3 | No fix listed |
| VMware vsphere data protection | = 6.0.4 | No fix listed |
| VMware vsphere data protection | = 6.1.0 | No fix listed |
| VMware vsphere data protection | = 6.1.1 | No fix listed |
| VMware vsphere data protection | = 6.1.2 | No fix listed |
| VMware vsphere data protection | = 6.1.3 | No fix listed |
| VMware vSphere Data Protection (VDP) | = 6.1.x | No fix listed |
| VMware vSphere Data Protection (VDP) | = 6.0.x | No fix listed |
| VMware vSphere Data Protection (VDP) | = 5.8.x | No fix listed |
| VMware vSphere Data Protection (VDP) | = 5.5.x | No fix listed |
References
- 98936 third-party-advisory vdb-entry
- 1038617 vdb-entry
- www.vmware.com patch vendor-advisory