CVE-2017-4952
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-4952
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-4952.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-4952
- Published
- 2018-05-02T14:29:00Z
- Modified
- 2025-01-08T10:13:06.981886Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
VMware Xenon 1.x, prior to 1.5.4-CR71, 1.5.77, 1.5.4-CR62, 1.3.7-CR12, 1.1.0-CR0-3, 1.1.0-CR31,1.4.2-CR41, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
- References
-
- http://www.securityfocus.com/bid/103093
- http://seclists.org/oss-sec/2018/q1/153
- https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1
- https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592
- https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8
- https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713
- https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c
- https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75
- https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a
- https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977
- https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3
Affected packages
Git / github.com/vmware-archive/xenon
Affected ranges
- Type
- GIT
- Repo
- https://github.com/vmware-archive/xenon
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixed
- Type
- GIT
- Repo
- https://github.com/vmware/xenon
- Events
-
Last affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedLast affectedIntroducedLast affected
Affected versions
v0.*
v0.3.0-release
v0.3.1-release
v0.3.2-release
v0.4.0-release
v0.4.1-release
v0.5.0-release
v0.5.1-release
v0.6.0-release
v0.7.0-release
v0.7.1-release
v0.7.2-release
v0.7.5-release
v0.7.6-release
v0.8.0-release
v0.8.1-release
v0.8.2-release
v0.9.0-release
v0.9.1-release
v0.9.2-release
v0.9.3-release
v0.9.4-release
v0.9.5-release
v0.9.6-release
v0.9.7-release
v1.*
v1.0.0-release
v1.1.0-CR0-1-release
v1.1.0-CR0-2-release
v1.1.0-CR0-3-release
v1.1.0-CR1-release
v1.1.0-CR2-release
v1.1.0-CR3-release
v1.1.0-CR3_1-release
v1.1.0-release
v1.1.1-release
v1.2.0-release
v1.3.0-release
v1.3.2-release
v1.3.3-release
v1.3.7-CR1-release
v1.3.7-CR1_1-release
v1.3.7-CR1_2-release
v1.3.7-release
v1.4.0-release
v1.4.1-release
v1.4.2-CR1-release
v1.4.2-CR2-release
v1.4.2-CR3-release
v1.4.2-CR4-release
v1.4.2-CR4_1-release
v1.4.2-release
v1.5.0-release
v1.5.1-release
v1.5.2-release
v1.5.3-release
v1.5.4-CR2-release
v1.5.4-CR3-release
v1.5.4-CR4-release
v1.5.4-CR5-release
v1.5.4-CR6-release
v1.5.4-CR6_1-release
v1.5.4-CR7-release
v1.5.4-release
v1.5.5-release
v1.5.6-release
v1.5.7-CR1-release
v1.5.7-CR2-release
v1.5.7-CR3-release
v1.5.7-CR4-release
v1.5.7-release
v1.5.7_5-release
v1.5.7_6-release
v1.6.0-release