Skip to content

CVE-2024-22275: Partial File Read in VMware vCenter Server

Notifications You must be signed in to change notification settings

mbadanoiu/CVE-2024-22275

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

CVE-2024-22275: Partial File Read in VMware vCenter Server

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.

Vendor Disclosure:

The vendor's disclosure for this vulnerability can be found here.

Requirements:

This vulnerability requires:

  • Valid credentials for a user that can execute the "com.vmware.rvc" command

Proof Of Concept:

More details and the exploitation process can be found in this PDF.

About

CVE-2024-22275: Partial File Read in VMware vCenter Server

Topics

Resources

Stars

Watchers

Forks