CVE-2019-11242

8.1 highEPSS 0.5%

A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.

Severity

CVSS 3.0

8.1 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2019-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cohesity:dataplatform

References

https://github.com/cohesity/SecAdvisory/blob/master/README.md
https://github.com/cohesity/SecAdvisory/blob/master/README.md

Check your stack JSON