7.3
High
CVE-2025-41231 VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud…
Description
VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Cloud Foundation 5 | 5.x → < 5.2.1.2 | 5.2.1.2 |
| VMware Cloud Foundation | 4.5.x | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of VMware Cloud Foundation
The 19 CVEs of VMware Cloud Foundation →
CVE-2025-22226
VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
7.1
High
CVE-2025-22225
VMware ESXi Arbitrary Write Vulnerability
8.2
High
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability
7.5
High
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
9.8
Critical