ByteOS Network

NVD Vulnerability Details :

CVE-2016-7456

Deferred

Source-security@vmware.com

Published At-29 Dec, 2016 | 09:59

Updated At-12 Apr, 2025 | 10:46

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.1

cpe:2.3:a:vmware:vsphere_data_protection:5.5.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.5

cpe:2.3:a:vmware:vsphere_data_protection:5.5.5:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.6

cpe:2.3:a:vmware:vsphere_data_protection:5.5.6:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.7

cpe:2.3:a:vmware:vsphere_data_protection:5.5.7:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.8

cpe:2.3:a:vmware:vsphere_data_protection:5.5.8:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.9

cpe:2.3:a:vmware:vsphere_data_protection:5.5.9:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.10

cpe:2.3:a:vmware:vsphere_data_protection:5.5.10:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.5.11

cpe:2.3:a:vmware:vsphere_data_protection:5.5.11:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.8.0

cpe:2.3:a:vmware:vsphere_data_protection:5.8.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.8.1

cpe:2.3:a:vmware:vsphere_data_protection:5.8.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.8.2

cpe:2.3:a:vmware:vsphere_data_protection:5.8.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.8.3

cpe:2.3:a:vmware:vsphere_data_protection:5.8.3:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>5.8.4

cpe:2.3:a:vmware:vsphere_data_protection:5.8.4:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.0.0

cpe:2.3:a:vmware:vsphere_data_protection:6.0.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.0.1

cpe:2.3:a:vmware:vsphere_data_protection:6.0.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.0.2

cpe:2.3:a:vmware:vsphere_data_protection:6.0.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.0.3

cpe:2.3:a:vmware:vsphere_data_protection:6.0.3:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.0.4

cpe:2.3:a:vmware:vsphere_data_protection:6.0.4:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.1.0

cpe:2.3:a:vmware:vsphere_data_protection:6.1.0:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.1.1

cpe:2.3:a:vmware:vsphere_data_protection:6.1.1:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.1.2

cpe:2.3:a:vmware:vsphere_data_protection:6.1.2:*:*:*:*:*:*:*

VMware (Broadcom Inc.)

>>vsphere_data_protection>>6.1.3

cpe:2.3:a:vmware:vsphere_data_protection:6.1.3:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-255	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/94990	security@vmware.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037502	security@vmware.com	Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2016-0024.html	security@vmware.com	Vendor Advisory
http://www.securityfocus.com/bid/94990	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037502	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2016-0024.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History