Skip to content
OpenAdvisories
Unscored CVE-2022-22939 EUVD-2022-28065GHSA-95v7-jv4x-23ww

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log fi…

Published Feb 4, 2022 · Updated Aug 3, 2024 · Assigned by vmware

Description

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or more log files.

Affected products

VendorProductAffectedFixed
— VMware Cloud Foundation VMware Cloud Foundation 4.x (before 4.3.1.1) and 3.x —

References