Description
VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | Cloud Foundation | 5.x – < 5.2.1.2, 4.5.x | 5.2.1.2 |
Advisories 2
- NCSC-2025-0170 Kwetsbaarheden verholpen in VMware Cloud Foundation NCSC-NL (Netherlands) · May 21, 2025
- WID-SEC-2025-1105 VMware Cloud Foundation: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 20, 2025