CVE-2015-6934
Summary
| CVE | CVE-2015-6934 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-12-21 03:59:00 UTC |
| Updated | 2016-11-28 19:40:00 UTC |
| Description | Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Manager (vADM) 7.x allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Vmware | Vcenter Orchestrator | 5.5 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.1 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.2 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.2.1 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.1 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.2 | All | All | All |
| Application | Vmware | Vcenter Orchestrator | 5.5.2.1 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.1 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.2 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.3 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.1 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.2 | All | All | All |
| Application | Vmware | Vrealize Orchestrator | 6.0.3 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple VMware Products CVE-2015-6934 Remote Code Execution Vulnerability | BID | www.securityfocus.com | |
| VMSA-2015-0009 | United States | CONFIRM | www.vmware.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.