Description (CNA)
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware vCenter Server and VMware Cloud Foundation | affected VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11) |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.