VMware vCenter Server Appliance Directory Traversal Vulnerability

Two vulnerabilities have been identified in VMware vCenter Server Appliance, which can be exploited by remote authenticated user to view files on the target system.

1. A remote authenticated user can supply a specially crafted request to retrieve arbitrary files from the target system.
2. A remote authenticated user can supply a specially crafted request to exploit an XML parsing flaw to retrieve arbitrary files from the target system.