XML External Entity Vulnerability in VMware Cloud Foundation NSX-V

CVE-2022-31678

What is CVE-2022-31678?

VMware Cloud Foundation (specifically the NSX-V component) is susceptible to an XML External Entity (XXE) vulnerability, which may allow remote users to exploit the issue. This vulnerability can lead to conditions that enable denial-of-service or unintended disclosure of sensitive information from affected systems. It is crucial for users operating VCF 3.x with NSX-V deployed to review security advisories and apply necessary patches to mitigate any potential threats.

References