First published: Wed Nov 24 2021(Updated: )
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Credit: security@vmware.com
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Cloud Foundation | =3.0 | |
VMware vCenter Server | =6.5 | |
VMware vCenter Server | =6.5-update_1 | |
VMware vCenter Server | =6.5-update_1b | |
VMware vCenter Server | =6.5-update_1c | |
VMware vCenter Server | =6.5-update_1d | |
VMware vCenter Server | =6.5-update_1e | |
VMware vCenter Server | =6.5-update_1g | |
VMware vCenter Server | =6.5-update_2 | |
VMware vCenter Server | =6.5-update_2b | |
VMware vCenter Server | =6.5-update_2c | |
VMware vCenter Server | =6.5-update_2d | |
VMware vCenter Server | =6.5-update_2g | |
VMware vCenter Server | =6.5-update_3 | |
VMware vCenter Server | =6.5-update_3d | |
VMware vCenter Server | =6.5-update_3f | |
VMware vCenter Server | =6.5-update_3k | |
VMware vCenter Server | =6.5-update_3n | |
VMware vCenter Server | =6.5-update_3p | |
VMware vCenter Server | =6.5-update_3q | |
VMware vCenter Server | =6.7 | |
VMware vCenter Server | =6.7-update_1 | |
VMware vCenter Server | =6.7-update_1b | |
VMware vCenter Server | =6.7-update_2 | |
VMware vCenter Server | =6.7-update_2a | |
VMware vCenter Server | =6.7-update_2c | |
VMware vCenter Server | =6.7-update_3 | |
VMware vCenter Server | =6.7-update_3a | |
VMware vCenter Server | =6.7-update_3b | |
VMware vCenter Server | =6.7-update_3f | |
VMware vCenter Server | =6.7-update_3g | |
VMware vCenter Server | =6.7-update_3j | |
VMware vCenter Server | =6.7-update_3l | |
VMware vCenter Server | =6.7-update_3m | |
VMware vCenter Server | =6.7-update_3n | |
VMware vCenter Server | =6.7-update_3o |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.