CVEvulnerability
CVE-2014-8373
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-12-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the "Connect (by) Using VMRC" function.
Affected configurations
• vmware vcloud automation center 6.0.1
• vmware vcloud automation center 6.0.1.1
• vmware vcloud automation center 6.0.1.2
• vmware vcloud automation center 6.1
• vmware vcloud automation center 6.1.1
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Dec/33 seclists.org
- http://secunia.com/advisories/61169 secunia.com
- http://www.securityfocus.com/archive/1/534186/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id/1031323 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2014-0013.html Vendor Advisory
- http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2014/Dec/33 seclists.org
- http://secunia.com/advisories/61169 secunia.com
- http://www.securityfocus.com/archive/1/534186/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id/1031323 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2014-0013.html Vendor Advisory