CVE-2015-2342 in vCenter Server
Summary
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/18/2015
Disclosure
10/12/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 78193 | VMware vCenter Server JMX RMI double free | 415 | High | Official fix | CVE-2015-2342 |