CVE:CVE-2017-4928
CNNVD:CNNVD-201711-494
VMware vCenter Server是美国威睿（VMware）公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台，可自动实施和交付虚拟基础架构。
VMware vCenter Server 6.0 U3c之前的6.0版本和5.5 U3f之前的5.5版本中存在安全绕过漏洞。远程攻击者可通过向内部服务发送带有已更改的包头利用该漏洞获取敏感信息。
solution:Upgrade vmware vcenter_server to a higher version than 5.5,5.5:1,5.5:1a,5.5:1b,5.5:1c,5.5:2,5.5:2b,5.5:2d,5.5:2e,5.5:3,5.5:3a,5.5:3b,5.5:3d,5.5:3e,5.5:b,5.5:c,6.0,6.0:1,6.0:1b,6.0:2,6.0:2a,6.0:2m,6.0:3,6.0:3a,6.0:3b,6.0:a,6.0:b,and avoid the version 5.5,5.5:1,5.5:1a,5.5:1b,5.5:1c,5.5:2,5.5:2b,5.5:2d,5.5:2e,5.5:3,5.5:3a,5.5:3b,5.5:3d,5.5:3e,5.5:b,5.5:c,6.0,6.0:1,6.0:1b,6.0:2,6.0:2a,6.0:2m,6.0:3,6.0:3a,6.0:3b,6.0:a,6.0:b