CVE-2015-2342

published 2015-10-12

CVE-2015-2342: The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—
vmware	vmware_esxi	—	—
vmware	vmware_vcenter_server	—	—
vmware	vsphere	—	—