Vulnerabilites related to vmware - vcloud_networking_and_security
Vulnerability from fkie_nvd
Published
2014-09-15 14:55
Modified
2025-04-12 10:46
Severity ?
Summary
VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| vmware | nsx | 6.0 | |
| vmware | nsx | 6.0.1 | |
| vmware | nsx | 6.0.2 | |
| vmware | nsx | 6.0.3 | |
| vmware | nsx | 6.0.4 | |
| vmware | nsx | 6.0.5 | |
| vmware | vcloud_networking_and_security | 5.1 | |
| vmware | vcloud_networking_and_security | 5.1.1 | |
| vmware | vcloud_networking_and_security | 5.1.2 | |
| vmware | vcloud_networking_and_security | 5.1.3 | |
| vmware | vcloud_networking_and_security | 5.1.4 | |
| vmware | vcloud_networking_and_security | 5.1.4.1 | |
| vmware | vcloud_networking_and_security | 5.5 | |
| vmware | vcloud_networking_and_security | 5.5.0a | |
| vmware | vcloud_networking_and_security | 5.5.1 | |
| vmware | vcloud_networking_and_security | 5.5.2 | |
| vmware | vcloud_networking_and_security | 5.5.2.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C54C78EC-80E9-4C43-9308-DA7AD6D6704A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DAF93BAE-35A6-446C-8039-0C691E4CDB38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5B746CB6-0FD4-46E7-84D3-1B0C81351323",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "94012F44-B707-4254-B83C-D8F9FF3FBA77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "46F8977D-79A8-4BB1-AD7E-84CD4EB162FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:nsx:6.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "25D21BCF-BCA4-4BC0-89F0-3CB927F4A4B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "371F3A2F-4904-4A42-94A1-75F847444E0E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "521ECBAD-C1AC-4AEB-92E2-4FEA64FB21DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "890888E0-637E-45CF-87FA-540C7F182BB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "994A1D41-D03F-484B-8249-F5E8F4B21868",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2D7971A2-2380-4F7F-A946-47DB869E6005",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.1.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2BBD7A8D-B7B2-4B46-B7A8-22B80A42C5EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "250ED8DD-35BE-47BD-9C10-0362A1DCADD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.5.0a:*:*:*:*:*:*:*",
"matchCriteriaId": "A051F828-41FD-4931-B7DC-F863D7E0310F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EBFEBA99-C2A9-46B8-A65F-B0E57D081D74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B0D3A5D6-01B2-4A07-9DF2-2545192B8DFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:vmware:vcloud_networking_and_security:5.5.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "55C2BFBD-50AE-4D30-BA72-51395EBAC584",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors."
},
{
"lang": "es",
"value": "VMware NSX 6.0 anterior a 6.0.6, y vCloud Networking and Security (vCNS) 5.1 anterior a 5.1.4.2 y 5.5 anterior a 5.5.3, no valida debidamente las entradas, lo que permite a atacantes obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2014-3796",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2014-09-15T14:55:11.603",
"references": [
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/59938"
},
{
"source": "cve@mitre.org",
"url": "http://www.securitytracker.com/id/1030835"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95926"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/59938"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1030835"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95926"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2014-3796 (GCVE-0-2014-3796)
Vulnerability from cvelistv5
Published
2014-09-15 14:00
Modified
2024-08-06 10:57
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.vmware.com/security/advisories/VMSA-2014-0009.html | x_refsource_CONFIRM | |
| http://www.securitytracker.com/id/1030835 | vdb-entry, x_refsource_SECTRACK | |
| http://secunia.com/advisories/59938 | third-party-advisory, x_refsource_SECUNIA | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95926 | vdb-entry, x_refsource_XF |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T10:57:17.838Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html"
},
{
"name": "1030835",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1030835"
},
{
"name": "59938",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/59938"
},
{
"name": "vmware-vcns-cve20143796-info-disc(95926)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95926"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-09-11T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html"
},
{
"name": "1030835",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1030835"
},
{
"name": "59938",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/59938"
},
{
"name": "vmware-vcns-cve20143796-info-disc(95926)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95926"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-3796",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain sensitive information via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html",
"refsource": "CONFIRM",
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0009.html"
},
{
"name": "1030835",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1030835"
},
{
"name": "59938",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/59938"
},
{
"name": "vmware-vcns-cve20143796-info-disc(95926)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95926"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-3796",
"datePublished": "2014-09-15T14:00:00",
"dateReserved": "2014-05-20T00:00:00",
"dateUpdated": "2024-08-06T10:57:17.838Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}