Vulnerability Details : CVE-2010-2928
The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file.
Exploit prediction scoring system (EPSS) score for CVE-2010-2928
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-2928
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:P/I:N/A:N |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2010-2928
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-2928
-
http://securityreason.com/securityalert/8079
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX - CXSecurity.com
-
http://www.vmware.com/security/advisories/VMSA-2011-0003.html
VMSA-2011-0003.2Vendor Advisory
-
http://www.securityfocus.com/archive/1/516397/100/0/threaded
SecurityFocus
-
http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
VMware vCenter Server 4.1 Update 1 Release Notes
Products affected by CVE-2010-2928
- cpe:2.3:a:vmware:vcenter_server:4.1:*:*:*:*:*:*:*