Skip to content
OpenAdvisories
High WID-SEC-2025-1105 3 CVEs

VMware Cloud Foundation: Mehrere Schwachstellen

Published May 19, 2025 · Updated May 20, 2025 · Revision 2 · de-DE

Vendor: VMware Product: Cloud Foundation

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Cloud Foundation ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.

Product

VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung.

Vulnerabilities 3

  • High 8.2
    CVE-2025-41229

    VMware Cloud Foundation Directory Traversal Vulnerability

    VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.

    VMware Cloud Foundation
  • High 7.5
    CVE-2025-41230

    VMware Cloud Foundation Information Disclosure Vulnerability

    VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.

    VMware Cloud Foundation
  • High 7.3
    CVE-2025-41231

    VMware Cloud Foundation Missing Authorisation Vulnerability

    VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-15838, EUVD-2025-15836, EUVD-2025-15837

  2. #1

    Initiale Fassung

References