Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vCenter Server和vRealize Automation 安全漏洞
Vulnerability Description
VMware vCenter Server和vRealize Automation都是美国威睿（VMware）公司的产品。前者是一套服务器和虚拟化管理软件，后者是一套云计算自动化软件。 VMware vCenter Server U3e之前的5.5版本、U2a之前的6.0版本和vRealize Automation 6.2.5之前的6.x版本中的Single Sign-On功能存在安全漏洞。远程攻击者可借助XML文档利用该漏洞读取任意文件或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A