Two vulnerabilities in VMware vSphere Data Protection



Risk High
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2017-4917
CVE-2017-4914
CWE-ID CWE-200
CWE-502
Exploitation vector Network
Public exploit Public exploit code for vulnerability #2 is available.
Vulnerable software
 vSphere Data Protection
Client/Desktop applications / Other client software

Vendor VMware, Inc

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Information disclosure

EUVDB-ID: #VU6952

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2017-4917

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a local attacker to obtain potentially sensitive information on a targeted system.

The weakness exists due to improper security restrictions imposed by the affected software. A local attacker can gain access to server credentials in plaintext format.

Successful exploitation of the vulnerability results in information disclosure.

Mitigation

Update to version 6.0.5, 6.1.4.

Vulnerable software versions

vSphere Data Protection: 5.5 - 6.1.3

CPE2.3 External links

https://www.vmware.com/security/advisories/VMSA-2017-0010.html


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Deserialization of Untrusted Data

EUVDB-ID: #VU6953

Risk: High

CVSSv4.0: 8.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2017-4914

CWE-ID: CWE-502 - Deserialization of Untrusted Data

Exploit availability: Yes

Description

The vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on a targeted system.

The weakness exists due to insecure deserialization of user-supplied content by the affected software. A remote attacker can submit specially crafted, serialized Java objects containing malicious commands and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation

Update to version 6.0.5, 6.1.4.

Vulnerable software versions

vSphere Data Protection: 5.5 - 6.1.3

CPE2.3 External links

https://www.vmware.com/security/advisories/VMSA-2017-0010.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###