VULNERABILITY INTELLIGENCE

CVE-2017-4919

CVSS score9 CRITICAL
EPSS probability2.04%
CISA KEVNot currently listed
Published2017-07-28
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function

Primary references