Not rated
CVE-2017-4914 VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue
Description
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vSphere Data Protection (VDP) | 6.1.x | No fix stated |
| vSphere Data Protection (VDP) | 6.0.x | No fix stated |
| vSphere Data Protection (VDP) | 5.8.x | No fix stated |
| vSphere Data Protection (VDP) | 5.5.x | No fix stated |