4.3
Medium
CVE-2023-34056 vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative…
Description
vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server 8.0 | earliest → < 8.0U2 | 8.0U2 |
| VMware vCenter Server 7.0 | earliest → < 7.0U3o | 7.0U3o |
| VMware Cloud Foundation (VMware vCenter Server) | 5.x | No fix stated |
| VMware Cloud Foundation (VMware vCenter Server) | 4.x | No fix stated |
References
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware vCenter Server
The 4 CVEs of VMware vCenter Server →
CVE-2023-34048
VMware vCenter Server Out-of-Bounds Write Vulnerability
9.8
Critical
CVE-2019-5531
VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to…
Not rated
CVE-2017-4919
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API…
Not rated