Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Unauthenticated Arbitrary File Read vulnerability in VMware vCenter - Vulnerability Database

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter

Description

VMware vCenter Server is an advanced server management software that provides a centralized platform for controlling VMware vSphere environments.

VMware vCenter (versions before 6.5u1) is vulnerable to an arbitrary file read vulnerability that allows an unauthenticated attacker to abuse VMware vCenter to read local system files.

Remediation

Upgrade to the latest version of VMware vCenter (this issue was fixed in version 6.5u1).

References

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter

Related Vulnerabilities

Local File Inclusion High
Common tags: File Inclusion
WordPress Plugin ChimpMate-WordPress MailChimp Assistant Local File Inclusion (1.3.2) High
Common tags: File Inclusion
WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Local File Inclusion (1.4.3) High
Common tags: File Inclusion
WordPress Plugin WP Rocket Local File Inclusion (2.10.3) High
Common tags: File Inclusion
WordPress Plugin Booking Calendar Local File Inclusion (7.0) High
Common tags: File Inclusion

Severity

High

Classification

CWE-22
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

File Inclusion