CVE-2017-4952 Auth bypass in VMware Xenon
An attacker can bypass authentication on utility endpoints to access sensitive information in VMware Xenon.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-4952?
CVE-2017-4952 is a high-severity authentication bypass vulnerability in VMware Xenon, published on 2 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
Weakness: CWE-732
Which versions are affected by CVE-2017-4952?
It affects 1 product.
Products include Vmware Xenon.
How do I fix CVE-2017-4952?
No fix has been published for CVE-2017-4952 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-4952 being exploited?
There is no known exploitation of CVE-2017-4952 in the wild and no public exploit code.
Sources
Also known as GHSA-rmq6-x837-659x.