4.9
Medium
CVE-2024-22275 The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the…
Description
The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server 8.0 | 8.0 → latest | No fix stated |
| VMware vCenter Server 7.0 | 7.0 → latest | No fix stated |
| VMware Cloud Foundation (vCenter Server) 5 | 5.x → < 5.1.1 | 5.1.1 |
| VMware Cloud Foundation (vCenter Server) | 4.x | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware vCenter Server
The 14 CVEs of VMware vCenter Server →
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability
7.5
High
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
9.8
Critical
CVE-2024-37081
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An…
7.8
High
CVE-2024-37080
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol
9.8
Critical