CVE-2014-3796 in NSX

Sumário

de MITRE

VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 20/05/2014
• Divulgação: 15/09/2014
• Moderação: aceite
• Entrada: VDB-67529
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 5.0 (NVD)
• EPSS: 0.01580
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3796
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3796
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3796/