VMware vCenter Operations Management Suite Multiple Vulnerabilities (VMSA-2014-0007)

High Nessus Plugin ID 76388


The remote host has a virtualization appliance installed that is affected by multiple vulnerabilities.


The version of vCenter Operations Manager installed on the remote host is prior to 5.8.2. It is, therefore, affected by the following vulnerabilities :

- An error exists in the included Apache Tomcat version related to handling 'Content-Type' HTTP headers and multipart requests such as file uploads that could allow denial of service attacks. (CVE-2014-0050)

- A security bypass error exists due to the included Apache Struts2 component, allowing manipulation of the ClassLoader via the 'class' parameter, which is directly mapped to the getClass() method. A remote, unauthenticated attacker can take advantage of this issue to manipulate the ClassLoader used by the application server, allowing for the bypass of certain security restrictions. Note that CVE-2014-0112 exists because CVE-2014-0094 was not a complete fix.
(CVE-2014-0094, CVE-2014-0112)


Upgrade to vCenter Operations Manager 5.7.3 / 5.8.2 or later.

Alternatively, the vendor has provided a workaround for the security bypass error.

See Also





Plugin Details

Severity: High

ID: 76388

File Name: vcenter_operations_manager_vmsa_2014-0007.nasl

Version: 1.8

Type: local

Family: Misc.

Published: 2014/07/07

Updated: 2018/08/06

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:vmware:vcenter_operations

Required KB Items: Host/VMware vCenter Operations Manager/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2014/06/24

Vulnerability Publication Date: 2014/03/25

Exploitable With

Core Impact

Metasploit (Apache Struts ClassLoader Manipulation Remote Code Execution)

Reference Information

CVE: CVE-2014-0050, CVE-2014-0094, CVE-2014-0112

BID: 65400, 65999, 67064

VMSA: 2014-0007

IAVB: 2014-B-0090