CVE-2017-4917

Critical

Published: 07/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

VMware vSphere Data Protection (VDP) versions 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This may allow plaintext credentials to be obtained.

Risk Assessment

The risk is that unauthorized individuals may gain access to the credentials, potentially leading to unauthorized access to systems.

Recommendation

It is recommended to upgrade to the latest version of VMware vSphere Data Protection to eliminate this vulnerability and to implement stronger methods for storing credentials.

Original NVD description (English source)

VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.