Obtain sensitive information vulnerability in VMware vCenter Server

Description

Improper certificate validation was found in VMware vCenter Server. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a traffic interception.

---

Technical details

This vulnerability can be exploited when vCenter Server binding to LDAP server via TLS.

Original advisories

• VMware advisory

Related products

• VMware-vCenter-Server

CVE list

• CVE-2015-6932
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com