Date published: 2014-04-11T15:55:04.510-04:00
Date last modified: 2014-04-14T12:58:12.650-04:00
CVSS Score: 5.8
Principal attack vector: NETWORK
Reference URL: http://www.vmware.com/security/advisories/VMSA-2014-0003.html
Summary: VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.