The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document.
CPE | Name | Operator | Version |
---|---|---|---|
vcenter_orchestrator | eq | 4.0 | |
vcenter_orchestrator | eq | 4.1 |