CVE-2015-6932

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-18 · updated 2026-06-17
Weakness: CWE-310

Description

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VMware vCenter Server: 5.5, 5.5-1, 5.5-1a, 5.5-1b, 5.5-1c, 5.5-2 (+6)

References

http://www.securitytracker.com/id/1033582
http://www.vmware.com/security/advisories/VMSA-2015-0006.html
http://www.securitytracker.com/id/1033582
http://www.vmware.com/security/advisories/VMSA-2015-0006.html

Get alerted when CVE-2015-6932 or the next vulnerability affects your stack