CVE-2008-3514

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows…

published August 13, 2008

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other system users."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01814 · 78.4th percentile
Published
2008-08-13T10:00Z
EPSS history
Timeline
  • 13 AUG 10:00Z
    VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows…
    cvelistv5