CVE-2012-1513: Infoleak
The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1513?
CVE-2012-1513 is classified as a high severity vulnerability due to the exposure of sensitive information.
How do I fix CVE-2012-1513?
To fix CVE-2012-1513, upgrade VMware vCenter Orchestrator to version 4.0 Update 4, 4.1 Update 2, or 4.2 Update 1 or later.
What type of systems are affected by CVE-2012-1513?
CVE-2012-1513 affects VMware vCenter Orchestrator versions 4.0, 4.1, and 4.2 prior to their respective updates.
What information can be exposed due to CVE-2012-1513?
CVE-2012-1513 can expose the vCenter Server password, allowing potential unauthorized access.
Who can exploit CVE-2012-1513?
CVE-2012-1513 can be exploited by remote authenticated administrators who have access to the HTML document containing sensitive information.