Information Disclosure Vulnerability in VMware vCenter Server

CVE-2022-31697

What is CVE-2022-31697?

The vCenter Server has a vulnerability that exposes sensitive information by logging credentials in plaintext. If a malicious actor gains access to a workstation that performs specific operations like Install, Upgrade, Migrate, or Restore using a vCenter Server Appliance ISO, they can potentially retrieve plaintext passwords recorded during these procedures. This issue highlights the importance of securing access to workstations and monitoring the logging configurations to prevent unauthorized access to sensitive information.

References