CVE Catalog
CVE-2016-5333
CriticalSummary
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data theft or system compromise.
Recommendation
It is recommended to remove the default SSH public key from the authorized_keys file and generate unique keys for each user.
Original NVD description (English source)
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.