Description

VMware vCenter Server is an advanced server management software that provides a centralized platform for controlling VMware vSphere environments.

VMware vCenter (versions before 6.5u1) is vulnerable to an arbitrary file read vulnerability that allows an unauthenticated attacker to abuse VMware vCenter to read local system files.

Remediation

Upgrade to the latest version of VMware vCenter (this issue was fixed in version 6.5u1).

References

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter

Related Vulnerabilities

Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32633)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.3)

WordPress Plugin Shariff Wrapper Local File Inclusion (4.6.13)

WordPress Plugin Aspose PDF Exporter Arbitrary File Download (1.0)

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

File Inclusion