CVE-2019-5537

State: Published
Severity: Not scored
Published: Oct 28, 2019
Updated: Aug 4, 2024
Reserved: Jan 7, 2019

Description

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over FTPS and HTTPS. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
VMware vCenter Server Appliancen/a	VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d)Affected

References

https://www.vmware.com/security/advisories/VMSA-2019-0018.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.