CVE-2015-4057

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen…

published February 21, 2017

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01496 · 74.0th percentile
Published
2017-02-21T19:00Z
EPSS history
Timeline
  • 21 FEB 19:00Z
    The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen…
    cvelistv5