CVE-2014-3796 in NSX

Résumé

par MITRE

VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 20/05/2014
• Divulgation: 15/09/2014
• Modérer: accepté
• Entrée: VDB-67529
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01580
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3796
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3796
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3796/