CVE-2015-6932

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Score

CVSS 2.0 5.8 Medium

Status

Modified - cve@mitre.org

Published

2015-09-18

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Vcenter Server (Vmware)

References

• http://www.securitytracker.com/id/1033582
• http://www.vmware.com/security/advisories/VMSA-2015-0006.html