Vulnerability Description
A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cohesity | Dataplatform | >= 5.0, < 6.1.1c |
Related Weaknesses (CWE)
References
- https://github.com/cohesity/SecAdvisory/blob/master/README.mdThird Party Advisory
- https://github.com/cohesity/SecAdvisory/blob/master/README.mdThird Party Advisory
FAQ
What is CVE-2019-11242?
CVE-2019-11242 is a vulnerability with a CVSS score of 8.1 (HIGH). A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCent...
How severe is CVE-2019-11242?
CVE-2019-11242 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-11242?
Check the references section above for vendor advisories and patch information. Affected products include: Cohesity Dataplatform.