Description
VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Cloud Foundation | 5.x – < 5.2.1.2, 4.5.x | 5.2.1.2 |
Advisories 2
- NCSC-2025-0170 Kwetsbaarheden verholpen in VMware Cloud Foundation NCSC-NL (Netherlands) · May 21, 2025
- WID-SEC-2025-1105 VMware Cloud Foundation: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 20, 2025