VULNERABILITY INTELLIGENCE

CVE-2013-3107

CVSS score4.3 MEDIUM
EPSS probability1.98%
CISA KEVNot currently listed
Published2013-05-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

Primary references