PT-2011-1384

CVE-2010-2928

·

Published

2011-02-16

·

Updated

2018-10-10

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions VMware vCenter Server version 4.1 before Update 1
Description The issue concerns the storage of log-on credentials in a configuration file by the vCenter Tomcat Management Application. This allows local users to gain privileges by reading the file, potentially leading to unauthorized access.
Recommendations For VMware vCenter Server version 4.1 before Update 1, apply Update 1 to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-255
Related identifiers
CVE-2010-2928
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com