WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."
| Software | From | Fixed in |
|---|---|---|
| vmware / server | 2.0.0 | 2.0.0.x |
| vmware / virtualcenter | 2.0.2 | 2.0.2.x |
| vmware / virtualcenter | 2.5 | 2.5.x |
| vmware / esx_server | 3.0.3 | 3.0.3.x |
| vmware / esx_server | 3.5 | 3.5.x |