CVE-2015-4057
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-02-21
- Last modified
- 2024-08-06
- Weaknesses
- CWE-200
Affected products
References
- http://seclists.org/bugtraq/2015/Jun/91
