{ "schema_version": "1.4.0", "id": "GHSA-x872-hfmg-7gqf", "modified": "2022-05-17T03:09:10Z", "published": "2022-05-17T03:09:10Z", "aliases": [ "CVE-2016-7456" ], "details": "VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7456" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/94990" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1037502" }, { "type": "WEB", "url": "http://www.vmware.com/security/advisories/VMSA-2016-0024.html" } ], "database_specific": { "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2016-12-29T09:59:00Z" } }