Description (CNA)
VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / vCenter | affected 8.0 before 8.0 U3g; affected 7.0 before 7.0 U3w |
| VMware / Cloud Foundation | affected 9.x.x.x before 9.0.1.0; affected 5.x before 5.2.2; affected 4.5.x |
| VMware / Telco Cloud Platform | affected 5.x, 4.x, 3.x, 2.x |
| VMware / Telco Cloud Infrastructure | affected 3.x, 2.x |
| VMware / vSphere Foundation | affected 9.x.x.x before 9.0.1.0 |
CWE
CWE-77
References
ADP enrichment
No English description supplied.
No references supplied.