CVE-2019-11242

A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.

• CWE-295

• https://github.com/cohesity/SecAdvisory/blob/master/README.mdThird Party Advisory
• https://github.com/cohesity/SecAdvisory/blob/master/README.mdThird Party Advisory

Published

Jul 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11232EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to l…
• CVE-2019-11233EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to l…
• CVE-2019-11234FreeRADIUS before 3.0.19 does not prevent use of reflection …
• CVE-2019-11235FreeRADIUS before 3.0.19 mishandles the "each participant ve…
• CVE-2019-11236In the urllib3 library through 1.24.1 for Python, CRLF injec…
• CVE-2019-1124A remote code execution vulnerability exists in the way that…
• CVE-2019-11243In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.Anonymou…8.1
• CVE-2019-11244In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubec…5
• CVE-2019-11245In kubelet v1.13.6 and v1.14.2, containers for pods that do …4.9
• CVE-2019-11246The kubectl cp command allows copying files between containe…6.5
• CVE-2019-11247The Kubernetes kube-apiserver mistakenly allows access to a …8.1
• CVE-2019-11248The debugging endpoint /debug/pprof is exposed over the unau…8.2