CVE-2015-4057 in Vision Intelligent Operations
Summary
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
05/22/2015
Disclosure
02/21/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 97177 | VCE Vision Intelligent Operations Plug-in for VMware vCenter information disclosure | 200 | Not defined | Official fix | CVE-2015-4057 |