VMware vSphere Data Protection CVE-2014-4624 Information Disclosure Vulnerability

Bugtraq ID:	70709
Class:	Design Error
CVE:	CVE-2014-4624
Remote:	Yes
Local:	No
Published:	Oct 23 2014 12:00AM
Updated:	Oct 29 2014 01:00AM
Credit:	Jakub Mleczko from the Orange Poland security team
Vulnerable:
Not Vulnerable:

VMware vSphere Data Protection CVE-2014-4624 Information Disclosure Vulnerability

VMware vSphere Data Protection is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.

VMware vSphere Data Protection CVE-2014-4624 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

VMware vSphere Data Protection CVE-2014-4624 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

VMware vSphere Data Protection CVE-2014-4624 Information Disclosure Vulnerability

References:

• VMware Homepage (VMware)