Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware Server 信息泄露漏洞
Vulnerability Description
VMware Server是一款简单易用的服务器虚拟工具。 VMware Server对用户凭据的在存储处理上存在漏洞,本地攻击者可能利用此漏洞轻易获取用户凭据。 在使用VMware Server进行控制台连接时,用户凭据被保存到了内存中。如果攻击者能够本地访问系统并读访问内存或能够访问内存崩溃信息的话,就可以获取用户凭据。
CVSS Information
N/A
Vulnerability Type
N/A