CVE-2016-7456

Critical

Published: 29/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

VMware vSphere Data Protection (VDP) versions 5.5.x through 6.1.x contains an SSH private key with a publicly known password, making it easier for remote attackers to gain login access via an SSH session.

Risk Assessment

The risk to the organization is that remote attackers could gain unauthorized access to the system, potentially leading to data theft or system compromise.

Recommendation

It is recommended to change the password for the SSH private key and to update to the latest version of VMware vSphere Data Protection to minimize risk.

Original NVD description (English source)

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.