CVE-2016-7456

Published: Dec 29, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

Affected (22)

Products: Vmware: Vsphere Data Protection

Vmware

1 product

Vsphere Data Protection

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Vmware Vsphere Data Protection	Version 5.5.10
Vmware Vsphere Data Protection	Version 5.5.11
Vmware Vsphere Data Protection	Version 5.5.1
Vmware Vsphere Data Protection	Version 5.5.5
Vmware Vsphere Data Protection	Version 5.5.6
Vmware Vsphere Data Protection	Version 5.5.7
Vmware Vsphere Data Protection	Version 5.5.8
Vmware Vsphere Data Protection	Version 5.5.9
Vmware Vsphere Data Protection	Version 5.8.0
Vmware Vsphere Data Protection	Version 5.8.1
Vmware Vsphere Data Protection	Version 5.8.2
Vmware Vsphere Data Protection	Version 5.8.3
Vmware Vsphere Data Protection	Version 5.8.4
Vmware Vsphere Data Protection	Version 6.0.0
Vmware Vsphere Data Protection	Version 6.0.1
Vmware Vsphere Data Protection	Version 6.0.2
Vmware Vsphere Data Protection	Version 6.0.3
Vmware Vsphere Data Protection	Version 6.0.4
Vmware Vsphere Data Protection	Version 6.1.0
Vmware Vsphere Data Protection	Version 6.1.1
Vmware Vsphere Data Protection	Version 6.1.2
Vmware Vsphere Data Protection	Version 6.1.3