« Volver al listado

CVE-2009-0518

Estado: ModificadaBaja (2.1)—

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Vmware — Vmware ESXVmware — Vmware EsxiVmware — Vmware Virtualcenter

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0518",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-06T15:30:04.327",
  "references": [
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/34585",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34373",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0944",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.vmware.com/pipermail/security-announce/2009/000054.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2009/Apr/0036.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/34585",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34373",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0005.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0944",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password."
    },
    {
      "lang": "es",
      "value": "VI Client de VMware VirtualCenter en versiones anteriores a la v2.5 Update 4, VMware ESXi 3.5 en sus versiones anteriores a Update 4, and VMware ESX 3.5 en sus versiones anteriores a Update 4 retienen la contraseña de VirtualCenter Server en la memoria de proceso, lo que puede permitir a los usuarios locales obtener esta contraseña."
    }
  ],
  "lastModified": "2026-06-16T23:05:12.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:vmware_esx:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93F8BE4D-EF33-4CC8-B66B-16ADE1CCBB63"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_esxi:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C25C336B-B4BC-4FDF-8FD2-F90783841EB4"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6314167B-74F5-465B-8082-51CDCBCC24CE"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FF04F98-E574-4A18-B89C-5AA2A8C67226"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CC4B360-6460-4327-8A88-6CE5463BC8B5"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41671F9F-C0FA-4D7F-9E31-EE114DB4F5A7"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A5CB5CB-B259-4081-9358-2A48AF82860D"
            },
            {
              "criteria": "cpe:2.3:a:vmware:vmware_virtualcenter:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0C57B5A-1175-4F6E-8138-915B3DDBB91C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}