Information disclosure in vCenter Server - CVE-2017-4928
Published: November 10, 2017
Vulnerability identifier: #VU9171
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-4928
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to insufficient validation of user-supplied input. A remote attacker can send specially crafted POST requests via the Flash-based vSphere Web Client to trigger a URL validation flaw and conduct server side request forgery (SSRF) and carriage return line feed (CRLF) injection attacks to gain access to arbitrary data.
The weakness exists due to insufficient validation of user-supplied input. A remote attacker can send specially crafted POST requests via the Flash-based vSphere Web Client to trigger a URL validation flaw and conduct server side request forgery (SSRF) and carriage return line feed (CRLF) injection attacks to gain access to arbitrary data.
Affected software
vCenter Server
How to mitigate CVE-2017-4928
Update to version 5.5 U3f, 6.0 U3c.