CVE-2005-3620: Low severity VMware ESX vulnerability
The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3620?
CVE-2005-3620 is classified as a moderate severity vulnerability due to the exposure of passwords in cleartext.
How do I fix CVE-2005-3620?
To fix CVE-2005-3620, upgrade to VMware ESX Server version 2.0.2 patch 1, 2.1.3 patch 1, or 2.5.3 patch 2 or later.
What systems are affected by CVE-2005-3620?
CVE-2005-3620 affects VMware ESX Server versions 2.0.x prior to patch 1, 2.1.x prior to patch 1, and 2.x prior to patch 2.
What kind of data is vulnerable in CVE-2005-3620?
CVE-2005-3620 exposes passwords in cleartext within URLs stored in world-readable web server log files.
Who can exploit CVE-2005-3620?
Local users can exploit CVE-2005-3620 to gain unauthorized privileges by accessing the log files containing the cleartext passwords.