SB2016081802 - Default public SSH keys in Photon OS 1.0 OVA

Description

This security bulletin contains information about 1 vulnerability.

1) Default public SSH key (CVE-ID: CVE-2016-5332)

CWE-ID: CWE-798 - Use of Hard-coded Credentials

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to gain unauthorized access to the system.

The vulnerability exists due to usage of default public SSH key in all versions of Photon OS 1.0 OVAs, downloaded before August 14, 2016. A remote attacker with the corresponding private SSH key can gain access to vulnerable system using default SSH keys.

Successful exploitation of this vulnerability will allow an attacker to gain unauthorized access to vulnerable system.

Remediation

Install update from vendor's website.

References

• https://github.com/vmware/photon/blob/master/CHANGELOG.md
• http://www.vmware.com/security/advisories/VMSA-2016-0012.html