CVE-2013-1405: vmware esx Improper Authentication

Vulnerability summary

CVE-2013-1405 is a high (CVSS 10.0) Improper Authentication vulnerability in vmware esx. EPSS estimates a 2.80% chance of exploitation in the next 30 days, higher than 86.2% of scored vulnerabilities.

Timeline

1. 15-02-2013
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

• CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.