VMware vCenter 5.5 LDAP Certificate Validation MitM Spoofing (VMSA-2015-0006)

medium Nessus Plugin ID 86124

Language:

Synopsis

The remote host has a virtualization management application installed that is affected by a man-in-the-middle spoofing vulnerability.

Description

The VMware vCenter Server installed on the remote host is version 5.5 prior to 5.5u3. It is, therefore, affected by a man-in-the-middle spoofing vulnerability due to improper validation of X.509 certificates from TLS LDAP servers. A remote, man-in-the-middle attacker can exploit this to intercept network traffic by spoofing a TLS server via a crafted certificate, resulting in the manipulation or disclosure of sensitive information.

Solution

Upgrade to VMware vCenter Server 5.5u3 (5.5.0 build-3000241) or later.

Plugin Details

Severity: Medium

ID: 86124

File Name: vmware_vcenter_vmsa-2015-0006_55.nasl

Version: 1.12

Type: remote

Family: Misc.

Published: 9/24/2015

Updated: 9/24/2019

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.7

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/a:vmware:vcenter_server

Required KB Items: Host/VMware/vCenter, Host/VMware/version, Host/VMware/release

Exploit Ease: No known exploits are available

Patch Publication Date: 9/16/2015

Vulnerability Publication Date: 9/16/2015

Reference Information

CVE: CVE-2015-6932

VMSA: 2015-0006

Detections

Analytics