CVE-2014-8371

Published: Dec 8, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.

Affected (9)

Products: Vmware: Vcenter Server Appliance

Vmware

1 product

Vcenter Server Appliance

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Vmware Vcenter Server Appliance	Version 5.0 update_1
Vmware Vcenter Server Appliance	Version 5.0 update_2
Vmware Vcenter Server Appliance	Version 5.0 update_3
Vmware Vcenter Server Appliance	Version 5.0 update_3a
Vmware Vcenter Server Appliance	Version 5.1
Vmware Vcenter Server Appliance	Version 5.1 update_1
Vmware Vcenter Server Appliance	Version 5.1 update_2
Vmware Vcenter Server Appliance	Version 5.5
Vmware Vcenter Server Appliance	Version 5.5 update_1