VMware vSphere Client XXE Injection Information Disclosure (VMSA-2016-0022)

medium Nessus Plugin ID 95657

Language:

Synopsis

The remote host has a virtualization client application installed that is affected by an information disclosure vulnerability.

Description

The version of vSphere Client installed on the remote Windows host is affected by an information disclosure vulnerability due to an incorrectly configured XML parser accepting XML external entities (XXE) from an untrusted source. An unauthenticated, remote attacker can exploit this issue to disclose arbitrary files by convincing a user to connect to a malicious instance of a vCenter Server or ESXi host containing specially crafted XML data.

Solution

Upgrade to vSphere Client version 5.5 Update 3e / 6.0 Update 2a or later.

Plugin Details

Severity: Medium

ID: 95657

File Name: vsphere_client_vmsa_2016-0022.nasl

Version: 1.5

Type: local

Agent: windows

Family: Windows

Published: 12/9/2016

Updated: 11/13/2019

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 1.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2016-7458

CVSS v3

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 5.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:vmware:vsphere_client

Required KB Items: SMB/VMware vSphere Client/Installed

Exploit Ease: No known exploits are available

Patch Publication Date: 11/22/2016

Vulnerability Publication Date: 11/22/2016

Reference Information

CVE: CVE-2016-7458

BID: 94483

IAVB: 2016-B-0182, 2016-B-0183

VMSA: 2016-0022

Detections

Analytics