Vulnerability Description
A man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x before 4.0.4-p2. This vulnerability might expose Rubrik user credentials configured to access vCenter as Rubrik clusters did not verify TLS certificates presented by vCenter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rubrik | Cdm | <= 3.0.0 |
Related Weaknesses (CWE)
References
- https://gist.github.com/srau/0ed7747953b3571247a6c485f91619ffThird Party Advisory
- https://support.rubrik.com/articles/How_To/000001135Permissions Required
- https://gist.github.com/srau/0ed7747953b3571247a6c485f91619ffThird Party Advisory
- https://support.rubrik.com/articles/How_To/000001135Permissions Required
FAQ
What is CVE-2018-5761?
CVE-2018-5761 is a vulnerability with a CVSS score of 8.1 (HIGH). A man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x before 4.0.4-p2. This vulnerability might expose Rubrik user credentials configured to access vCenter as...
How severe is CVE-2018-5761?
CVE-2018-5761 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-5761?
Check the references section above for vendor advisories and patch information. Affected products include: Rubrik Cdm.