Information disclosure

2017-08-0116:29:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.0%

JSON

VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted.

CPENameOperatorVersion
vcenter_servereq6.5

CPE	Name	Operator	Version
	vcenter_server	eq	6.5

References

www.securityfocus.com/bid/100012

www.securitytracker.com/id/1039013

www.vmware.com/security/advisories/VMSA-2017-0013.html