Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2008-4278

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.

  • Published: Oct 6, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-4278
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
vmware / virtualcenter - 2.5.x
vmware / virtualcenter 1.4.1 1.4.1.x
vmware / virtualcenter 2.0.1 2.0.1.x
vmware / virtualcenter 2.0.2 2.0.2.x
vmware / virtualcenter 2.0.2-update_4 2.0.2-update_4.x
vmware / virtualcenter 2.0.2-update_2 2.0.2-update_2.x
vmware / virtualcenter 2.0.2-update_3 2.0.2-update_3.x
vmware / virtualcenter 2.5-update_1 2.5-update_1.x
vmware / virtualcenter 2.5 2.5.x