CVE-2022-31697 — n/a / VMware vCenter Server, VMware Cloud Foundation

Description (CNA)

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.

Affected (CNA)

Vendor / product	Versions
n/a / VMware vCenter Server, VMware Cloud Foundation	affected VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x)

CWE

No CWE identifiers supplied.

References

https://www.vmware.com/security/advisories/VMSA-2022-0030.html

ADP enrichment

CVE

No English description supplied.

https://www.vmware.com/security/advisories/VMSA-2022-0030.html

CISA-ADP

No English description supplied.

No references supplied.