VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HVMware vSphere Data Protection
APPVmware5.5.15.5.105.5.115.5.55.5.65.5.75.5.85.5.95.8.05.8.15.8.25.8.35.8.46.0.06.0.1+ 7 more
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2018-11066CRITICAL9.8PL ✓same product
RCE w Dell EMC Avamar Client Manager — zdalny dostęp bez uwierzytelnienia
CVE-2017-4914CRITICAL9.8PL ✓same product
Zdalne wykonanie kodu przez błąd deserializacji w VMware vSphere Data Protection
CVE-2017-4917CRITICAL9.8PL ✓same product
VMware vSphere Data Protection — odwracalne szyfrowanie danych uwierzytelniających vCenter
CVE-2018-11067MEDIUM6.1same product
Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7....
CVE-2018-11076MEDIUM6.5same product
Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Prote...