Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vCenter Server信息泄露漏洞
Vulnerability Description
VMware vCenter Server是美国威睿(VMware)公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台,可自动实施和交付虚拟基础架构。VirtualCenter是VMware的虚拟服务器管理系统。 VMware vCenter Update 3之前的4.0版本和Update 1之前的4.1 版本中的vCenter Server中存在信息泄露漏洞。某些日志文件不安全地存储了SOAP会话ID,本地用户可以利用该漏洞泄露管理用户的ID。
CVSS Information
N/A
Vulnerability Type
N/A