Information Disclosure Vulnerability in VMware vCenter Server

CVE-2022-31697

What is CVE-2022-31697?

The vCenter Server has a vulnerability that exposes sensitive information by logging credentials in plaintext. If a malicious actor gains access to a workstation that performs specific operations like Install, Upgrade, Migrate, or Restore using a vCenter Server Appliance ISO, they can potentially retrieve plaintext passwords recorded during these procedures. This issue highlights the importance of securing access to workstations and monitoring the logging configurations to prevent unauthorized access to sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References