Directory Traversal Vulnerability in VMware vCenter Server
CVE-2011-0426

Currently unrated

Key Information:

Vendor
Vmware
Status
Vcenter
Virtualcenter
Vendor
CVE Published:
9 May 2011

Summary

A directory traversal vulnerability exists in VMware vCenter Server which allows remote attackers to potentially access arbitrary files on the server. This issue affects various versions of VMware vCenter, including those prior to Update 3 for vCenter 4.0 and those before Update 1 for vCenter 4.1, as well as VirtualCenter 2.5 prior to Update 6a. The vulnerability can be exploited through unspecified vectors, increasing the risk of unauthorized information disclosure.

References

http://lists.vmware.com/pipermail/security-announce/2011/...
mailing-listx_refsource_MLIST
http://securitytracker.com/id?1025502
vdb-entryx_refsource_SECTRACK
http://www.vmware.com/security/advisories/VMSA-2011-0008....
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.