Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repository may be able to perform a session hijack when the vCenter Server Appliance Management Interface is used to download vCenter updates.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vCenter Server 信任管理问题漏洞
Vulnerability Description
VMware vCenter Server是美国威睿（VMware）公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台，可自动实施和交付虚拟基础架构。 VMware vCenter Server存在安全漏洞，该漏洞源于设备管理接口更新功能中包含一个会话劫持漏洞，因为缺少证书验证。当vCenter服务器设备管理接口用于下载vCenter更新时，网络定位在vCenter服务器和更新存储库之间的攻击者可能会执行会话劫持。以下产品及版本受到影响：6.7系列6.7
CVSS Information
N/A
Vulnerability Type
N/A