CVE-2016-7460
published 2016-12-29CVE-2016-7460: The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read…
PriorityP348critical9.1CVSS 3.0
AVNACLPRNUINSUCHINAH
EPSS
2.15%
80.1th percentile
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | esxi | — | — |
| vmware | vmware_vcenter_server | — | — |
| vmware | vmware_vsphere | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
| vmware | vrealize_automation | — | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware product updates address information disclosure vulnerabilities
vendor_vmware·2016-11-22·CVSS 5.8
CVE-2016-7458 [MEDIUM] VMware product updates address information disclosure vulnerabilities
VMSA-2016-0022: VMware product updates address information disclosure vulnerabilities
a. vSphere Client XML External Entity vulnerability The vSphere Client contains an XML External Entity (XXE) vulnerability. This issue can lead to information disclosure if a vSphere Client user is tricked into connecting to a malicious instance of vCenter Server or ESXi. There are no known workarounds for this issue. VMware would like to thank Vladimir Ivanov, Andrey Evlanin, Mikhail Stepankin, Artem Kondratenko, Arseniy Sharoglazov of Positive Technologies for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-7458 to this issue. Column 5 of the following table lists the action required to remediate the vulnerability in each
GHSA
GHSA-mhmr-f673-jqv8: The Single Sign-On feature in VMware vCenter Server 5
ghsa_unreviewed·2022-05-17
CVE-2016-7460 [CRITICAL] CWE-611 GHSA-mhmr-f673-jqv8: The Single Sign-On feature in VMware vCenter Server 5
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/94485http://www.securitytracker.com/id/1037327http://www.securitytracker.com/id/1037329http://www.vmware.com/security/advisories/VMSA-2016-0022.htmlhttp://www.securityfocus.com/bid/94485http://www.securitytracker.com/id/1037327http://www.securitytracker.com/id/1037329http://www.vmware.com/security/advisories/VMSA-2016-0022.html
2016-12-29
Published