CVE-2022-31697

Опубликовано: 13 дек. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.

Ссылки

https://www.vmware.com/security/advisories/VMSA-2022-0030.html
Vendor Advisory
https://www.vmware.com/security/advisories/VMSA-2022-0030.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3r:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3s:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.5:update3t:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3p:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3q:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:6.7:update3r:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:*

cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*

Версия от 3.0 (включая)

EPSS

Процентиль: 15%

0.00048

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

GHSA-j724-gwg9-qjvw