CVE-2017-4917

Published: Jun 7, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.

Affected (21)

Products: Vmware: Vsphere Data Protection

Vmware

1 product

Vsphere Data Protection

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Vmware Vsphere Data Protection	Version 5.5.10
Vmware Vsphere Data Protection	Version 5.5.11
Vmware Vsphere Data Protection	Version 5.5.5
Vmware Vsphere Data Protection	Version 5.5.6
Vmware Vsphere Data Protection	Version 5.5.7
Vmware Vsphere Data Protection	Version 5.5.8
Vmware Vsphere Data Protection	Version 5.5.9
Vmware Vsphere Data Protection	Version 5.8.0
Vmware Vsphere Data Protection	Version 5.8.1
Vmware Vsphere Data Protection	Version 5.8.2
Vmware Vsphere Data Protection	Version 5.8.3
Vmware Vsphere Data Protection	Version 5.8.4
Vmware Vsphere Data Protection	Version 6.0.0
Vmware Vsphere Data Protection	Version 6.0.1
Vmware Vsphere Data Protection	Version 6.0.2
Vmware Vsphere Data Protection	Version 6.0.3
Vmware Vsphere Data Protection	Version 6.0.4
Vmware Vsphere Data Protection	Version 6.1.0
Vmware Vsphere Data Protection	Version 6.1.1
Vmware Vsphere Data Protection	Version 6.1.2
Vmware Vsphere Data Protection	Version 6.1.3