CVE-2013-3107

medium

Description

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

References

http://www.vmware.com/security/advisories/VMSA-2013-0006.html

Details

Source: MITRE

Published: 2013-05-01

Updated: 2013-05-01

Type: CWE-264

Risk Information

CVSS v2

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM