UpHeron
All vulnerabilities

Servers and applications

CVE-2015-6932

VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Severity
Medium 5.8
Published
18 Sept 2015
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.7% in the next 30 daysHigher than 55% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
CWE-310
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data
CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Sources
NVD

Affected software

SoftwareAffected versions
VMware vCenter ServerServers and applications · cpe:a:vmware:vcenter_server
  • Version 6.0
  • Version 6.0-b
  • Version 6.0-a
  • Version 5.5-2e
All 12 release lines
  • Version 5.5-1a
  • Version 5.5-1b
  • Version 5.5-1c
  • Version 5.5-2b
  • Version 5.5
  • Version 5.5-1
  • Version 5.5-2
  • Version 5.5-2d
  • Version 5.5-2e
  • Version 6.0-a
  • Version 6.0-b
  • Version 6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-6932
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-6932