Total vulnerabilities in the database
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
| Software | From | Fixed in |
|---|---|---|
| vmware / vcenter_server | 6.7 | 6.7.x |
| vmware / vcenter_server | 7.0 | 7.0.x |
| vmware / cloud_foundation | 3.0 | 5.0 |