Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially r

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware vCenter Server

Default version status: unaffected

  • 8.0 to < 8.0 U2baffected
  • 7.0 to < 7.0 U3qaffected

n/a VMware Cloud Foundation (vCenter Server)

Default version status: unaffected

  • 5.x to < 5.1.1affected
  • 4.xaffected

References