CWE Code: 306
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Missing Authentication for Critical Function
Summary: vmware vcenter server 5.5, 6.0, 6.5 allows vsphere users with certain, limited vsphere privileges to use the vix api to access guest operating systems without the need to authenticate.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-28
Last Modified Date: 2019-10-03
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Missing Authentication for Critical Function.
user
CWE Code: 306
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Missing Authentication for Critical Function
Summary: vmware vcenter server 5.5, 6.0, 6.5 allows vsphere users with certain, limited vsphere privileges to use the vix api to access guest operating systems without the need to authenticate.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-28
Last Modified Date: 2019-10-03
assistant