Description
VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability.
A malicious actor with adjacent access to
web/proxy server logging may be able to obtain sensitive information
from URLs that are logged.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Cloud Director Object Storage Extension | VMware Cloud Director Object Storage Extension 3.0, VMware Cloud Director Object Storage Extension 2.x | — |
Advisories 1
- WID-SEC-2024-1470 VMware Cloud Director: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 27, 2024