CVE-2019-11242

—

CVSS 3.0

8.1 high

EPSS

<1%p43

Published

Jul 12, 2019 (Jul 12, 2019)

Modified

Jun 17, 2026

Description

A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.

Vendors: cohesity
Products: dataplatform
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.