CVE-2018-5761

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-22 · updated 2026-06-17
Weakness: CWE-295

Description

A man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x before 4.0.4-p2. This vulnerability might expose Rubrik user credentials configured to access vCenter as Rubrik clusters did not verify TLS certificates presented by vCenter.

Affected products

Rubrik Cdm: through 3.0.0; from 4.0.0 through 4.0.4; 4.0.4-p1

References

https://gist.github.com/srau/0ed7747953b3571247a6c485f91619ff
https://support.rubrik.com/articles/How_To/000001135
https://gist.github.com/srau/0ed7747953b3571247a6c485f91619ff
https://support.rubrik.com/articles/How_To/000001135

Get alerted when CVE-2018-5761 or the next vulnerability affects your stack