CVE-2017-4923 VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-bas...
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vcenter server | = 6.5 | No fix listed |
References
- 99997 third-party-advisory vdb-entry
- 1039013 third-party-advisory vdb-entry
- www.vmware.com patch vendor-advisory