CWE Code: 306
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Missing Authentication for Critical Function
Summary: vmware vcenter server 5.5, 6.0, 6.5 allows vsphere users with certain, limited vsphere privileges to use the vix api to access guest operating systems without the need to authenticate.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-07-28
Last Modified Date: 2019-10-03