CVE-2014-1210

CWE-3103 documents3 sources
Severity
5.8MEDIUM
EPSS
0.2%
top 60.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Vsphere Client
Timeline
PublishedApr 11
Latest updateMay 17

Description

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDvmware/vsphere_client5.0, 5.1+1

🔴Vulnerability Details

2
GHSA
GHSA-7rj8-xh5v-9hqg: VMware vSphere Client 5↗2022-05-17
▶
CVEList
CVE-2014-1210: VMware vSphere Client 5↗2014-04-11
▶