CVE-2019-11242

ALTO 8.1CVE-2019-11242 · Published 12/07/2019 · updated 17/06/2026

En resumen

CVE-2019-11242 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a dataplatform (cohesity).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.53%, mayor que el 44.8% de las vulnerabilidades.
Solución: actualizar a 6.1.1c o posterior.

Package	Affected versions	Patched versions
dataplatform cohesity	`≥ 5.0, < 6.1.1c`	`6.1.1c`

Description

A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.

References

cohesity/SecAdvisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free