Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VMware vCenter Server 安全漏洞
Vulnerability Description
VMware vCenter Server是美国威睿（VMware）公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台，可自动实施和交付虚拟基础架构。 VMware vCenter Server 6.0 U3c之前的6.0版本和5.5 U3f之前的5.5版本中存在安全绕过漏洞。远程攻击者可通过向内部服务发送带有已更改的包头利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A