Description
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- vmware / Cloud Foundation9.0.x.x – 9.0.x.x
- vmware / Cloud Foundation5.x – 5.x
- vmware / Cloud Foundation9.1.x.x – 9.1.x.x
- vmware / Telco Cloud Infrastructure3.0 – 3.0
- vmware / Telco Cloud Platform4.x – 4.x
- vmware / Telco Cloud Platform3.0 – 3.0
- vmware / Telco Cloud Platform5.1.x – 5.1.x
- vmware / Telco Cloud Platform5.0.x – 5.0.x
- vmware / vCenter9.1.x.x – 9.1.0.0300
- vmware / vCenter9.0.x.x – 9.0.2.0100
- vmware / vCenter8.0 – 8.0 U3k
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vcenter_server8.0 – 8.0
- vmware / vSphere Foundation9.0.x.x – 9.0.x.x
- vmware / vSphere Foundation9.1.x.x – 9.1.x.x
Updated 23m ago · 8 sources