5.5
Medium
CVE-2022-31697 The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext
Description
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server, VMware Cloud Foundation | Versions not published |
References
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware vCenter Server, VMware Cloud Foundation
The 19 CVEs of VMware vCenter Server, VMware Cloud Foundation →
CVE-2022-31698
The vCenter Server contains a denial-of-service vulnerability in the content library service
5.3
Medium
CVE-2021-22020
The vCenter Server contains a denial-of-service vulnerability in the Analytics service
Not rated
CVE-2021-22019
The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service
Not rated
CVE-2021-22018
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in
Not rated