CVE-2016-7458

VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS v3 5.8 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.8^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/94483	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037328
http://www.vmware.com/security/advisories/VMSA-2016-0022.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:vsphere_client:5.5:::::::*
	cpe:2.3:a:vmware:vsphere_client:5.5:u1::::::
	cpe:2.3:a:vmware:vsphere_client:5.5:u2::::::
	cpe:2.3:a:vmware:vsphere_client:5.5:u3a::::::
	cpe:2.3:a:vmware:vsphere_client:5.5:u3b::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:::::::*
	cpe:2.3:a:vmware:vsphere_client:6.0:2::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:2m::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:a::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:b::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:u1::::::
	cpe:2.3:a:vmware:vsphere_client:6.0:u1b::::::

History

No history.

Information

Published : 2016-12-29 09:59

Updated : 2024-02-04 19:11

NVD link : CVE-2016-7458

Mitre link : CVE-2016-7458

CVE.ORG link : CVE-2016-7458

JSON object : View

Products Affected

vmware

vsphere_client

CWE

CWE-611

Improper Restriction of XML External Entity Reference

{"id": "CVE-2016-7458", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2016-12-29T09:59:00.603", "references": [{"url": "http://www.securityfocus.com/bid/94483", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@vmware.com"}, {"url": "http://www.securitytracker.com/id/1037328", "source": "security@vmware.com"}, {"url": "http://www.vmware.com/security/advisories/VMSA-2016-0022.html", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-611"}]}], "descriptions": [{"lang": "en", "value": "VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue."}, {"lang": "es", "value": "VMware vSphere Client 5.5 en versiones anteriores a U3e y 6.0 en versiones anteriores a U2a permite a vCenter Server remoto e instancias ESXi leer archivos arbitrarios a trav\u00e9s de un documento XML que contiene una declaraci\u00f3n de entidad externa en conjunci\u00f3n con una referencia de entidad, relacionado con un problema XML External Entity (XXE)."}], "lastModified": "2017-07-28T01:29:06.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:vsphere_client:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70442B21-C2C9-4883-AD8E-4233B2EA10FD"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:5.5:u1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65511CF3-4584-4328-A7D8-39136FC824A3"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:5.5:u2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "764F7621-FA8C-4DF3-818D-CB0DE0F404C7"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:5.5:u3a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A06632-642F-446F-BCAE-2E520D85F4D1"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:5.5:u3b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47C3C60E-AFBA-4D36-832C-46EFC16D7895"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDFEF209-2DB4-40FC-8BBD-1543FE3CB71A"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A619CE01-5257-424C-9865-862D60FDF570"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:2m:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7177815-9C77-48B3-ACB8-D0B1451A0965"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8221AC11-7E4E-45C1-AB47-D2E2070F7D60"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CA6FA6A-37A8-4363-BBA0-C4FAF6FE9C86"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:u1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A932E99F-E0FF-4037-8EE9-822F6626F09A"}, {"criteria": "cpe:2.3:a:vmware:vsphere_client:6.0:u1b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1AD54EC-6EBE-4DBB-9A6D-ED58A15CD481"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}