Lucene search

K
nvd[email protected]NVD:CVE-2008-4278
HistoryOct 06, 2008 - 7:54 p.m.

CVE-2008-4278

2008-10-0619:54:36
CWE-200
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.6%

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user’s password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.

Affected configurations

NVD
Node
vmwarevirtual_infrastructure_client
OR
vmwarevirtualcenterRange2.5update_2
OR
vmwarevirtualcenterMatch1.4.1
OR
vmwarevirtualcenterMatch2.0unknownclient
OR
vmwarevirtualcenterMatch2.0.1
OR
vmwarevirtualcenterMatch2.0.2
OR
vmwarevirtualcenterMatch2.0.2update_2
OR
vmwarevirtualcenterMatch2.0.2update_3
OR
vmwarevirtualcenterMatch2.0.2update_4
OR
vmwarevirtualcenterMatch2.5
OR
vmwarevirtualcenterMatch2.5update_1
AND
microsoftwindows

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.6%