Skip to main content

Vcenter Server CVE-2017-4928

HIGH
Cross-Site Request Forgery (CSRF) (CWE-352)
2017-11-17 security@vmware.com
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 17, 2017 - 14:29 cve.org
HIGH 7.5

DescriptionCVE.org

The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.

AnalysisAI

The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure. Affected products include: Vmware Vcenter Server. Version information: prior to 6.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

CVE-2015-2342 CRITICAL POC
10.0 Oct 12

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

CVE-2021-22005 CRITICAL POC
9.8 Sep 23

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. Rated critical severity (CV

CVE-2021-21985 CRITICAL POC
9.8 May 26

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

CVE-2021-21972 CRITICAL POC
9.8 Feb 24

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. Rated critical sev

CVE-2024-37081 HIGH POC
7.8 Jun 18

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. Rated h

CVE-2021-22015 HIGH POC
7.8 Sep 23

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and

CVE-2020-3952 CRITICAL POC
9.8 Apr 10

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Servi

CVE-2022-31680 CRITICAL POC
9.1 Oct 07

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). Rated cri

CVE-2013-1405 CRITICAL
10.0 Feb 15

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0

CVE-2016-2078 MEDIUM POC
6.1 Jun 08

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before upd

CVE-2017-4923 CRITICAL
9.8 Aug 01

VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. Rated critical severity (C

CVE-2024-38813 CRITICAL
9.8 Sep 17

The vCenter Server contains a privilege escalation vulnerability. Rated critical severity (CVSS 9.8), this vulnerability

Share

CVE-2017-4928 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy