Incorrect permission assignment in VMware Xenon
Priority LOW 39CWE-732Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
Why it matters now
EPSS 0.03729 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| VMware | VMware Xenon | 1.x prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8. | — | No fix listed | CNA |
- VMware Xenon VendorVMware Affected 1.x prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8. Fixed in — No fix listed CNA
CPE configurations NVD · 15
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:xenon:*:*:*:*:*:*:*:* | 1.0.0 – 1.5.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.1.0:cr0-3:*:*:*:*:*:* | 1.1.0 cr0-3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.1.0:cr3_1:*:*:*:*:*:* | 1.1.0 cr3_1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.3.7:cr1_2:*:*:*:*:*:* | 1.3.7 cr1_2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.4.2:cr4_1:*:*:*:*:*:* | 1.4.2 cr4_1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr2:*:*:*:*:*:* | 1.5.4 cr2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr3:*:*:*:*:*:* | 1.5.4 cr3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr4:*:*:*:*:*:* | 1.5.4 cr4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr5:*:*:*:*:*:* | 1.5.4 cr5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr6:*:*:*:*:*:* | 1.5.4 cr6 | Vulnerable | VMware |
- cpe:2.3:a:vmware:xenon:*:*:*:*:*:*:*:* Versions 1.0.0 – 1.5.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.1.0:cr0-3:*:*:*:*:*:* Versions 1.1.0 cr0-3 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.1.0:cr3_1:*:*:*:*:*:* Versions 1.1.0 cr3_1 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.3.7:cr1_2:*:*:*:*:*:* Versions 1.3.7 cr1_2 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.4.2:cr4_1:*:*:*:*:*:* Versions 1.4.2 cr4_1 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr2:*:*:*:*:*:* Versions 1.5.4 cr2 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr3:*:*:*:*:*:* Versions 1.5.4 cr3 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr4:*:*:*:*:*:* Versions 1.5.4 cr4 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr5:*:*:*:*:*:* Versions 1.5.4 cr5 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr6:*:*:*:*:*:* Versions 1.5.4 cr6 Vulnerable ·VMware
Show 5 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:xenon:1.5.4:cr6_1:*:*:*:*:*:* | 1.5.4 cr6_1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr6_2:*:*:*:*:*:* | 1.5.4 cr6_2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4:cr7:*:*:*:*:*:* | 1.5.4 cr7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.4_8:*:*:*:*:*:*:* | 1.5.4_8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:xenon:1.5.7_7:*:*:*:*:*:*:* | 1.5.7_7 | Vulnerable | VMware |
- cpe:2.3:a:vmware:xenon:1.5.4:cr6_1:*:*:*:*:*:* Versions 1.5.4 cr6_1 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr6_2:*:*:*:*:*:* Versions 1.5.4 cr6_2 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4:cr7:*:*:*:*:*:* Versions 1.5.4 cr7 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.4_8:*:*:*:*:*:*:* Versions 1.5.4_8 Vulnerable ·VMware
- cpe:2.3:a:vmware:xenon:1.5.7_7:*:*:*:*:*:*:* Versions 1.5.7_7 Vulnerable ·VMware
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-4952
- 2026-10-03 Alias added: GHSA-rmq6-x837-659x
References
Patch 9
- https://github.com/vmware/xenon/commit/b1fd306047ecdac82661d636ebee801a7f2b3a0a
- https://github.com/vmware/xenon/commit/30ae41bccf418d88b52b35a81efb3c1304b798f8
- https://github.com/vmware/xenon/commit/756d893573414eec8635c2aba2345c4dcf10b21c
- https://github.com/vmware/xenon/commit/5682ef8d40569afd00fb9a5933e7706bb5b66713
- https://github.com/vmware/xenon/commit/ec30db9afada9cb52852082ce4d7d0095524f3b3
- https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1
- https://github.com/vmware/xenon/commit/c23964eb57e846126daef98ef7ed15400313e977
- https://github.com/vmware/xenon/commit/7a747d82b80cd38d2c11a0d9cdedb71c722a2c75
- https://github.com/vmware/xenon/commit/06b9947cf603ba40fd8b03bfeb2e84528a7ab592
Sources
- CVE-2017-4952 · CVE Program
- CVE-2017-4952 · NVD
- FIRST EPSS
- GHSA-rmq6-x837-659x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences