Description
vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware vCenter Server | 8.0 – < 8.0U2, 7.0 – < 7.0U3o | 8.0U2 |
| VMware | VMware Cloud Foundation (VMware vCenter Server) | 5.x, 4.x | — |
Advisories 1
- WID-SEC-2023-2740 VMware vCenter Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2024