Description (CNA)
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / Cloud Foundation | affected 9.1.x.x; affected 9.0.x.x; affected 5.x |
| VMware / vSphere Foundation | affected 9.1.x.x; affected 9.0.x.x |
| VMware / vCenter | affected 9.1.x.x before 9.1.0.0300; affected 9.0.x.x before 9.0.2.0100; affected 8.0 before 8.0 U3k |
| VMware / Telco Cloud Infrastructure | affected 3.0 |
| VMware / Telco Cloud Platform | affected 5.1.x; affected 5.0.x; affected 4.x; affected 3.0 |
CWE
CWE-303
References
ADP enrichment
No English description supplied.
No references supplied.