Description (CNA)
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / vSphere Data Protection (VDP) | affected 6.1.x; affected 6.0.x; affected 5.8.x; affected 5.5.x |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/98936
- http://www.vmware.com/security/advisories/VMSA-2017-0010.html
- http://www.securitytracker.com/id/1038617
ADP enrichment
No English description supplied.