Description
VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password.
References
- 20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues mailing-list
- 34373 vdb-entry
- oval:org.mitre.oval:def:6376 vdb-entry signature
- ADV-2009-0944 vdb-entry
- [security-announce] 20090403 VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues mailing-list
- http://www.vmware.com/security/advisories/VMSA-2009-0005.html
- 34585 third-party-advisory