VMWare vCenter Server Appliance Sensitive Information Disclosure Vulnerability

Last Update Date: 28 Oct 2019 09:03 Release Date: 28 Oct 2019 5900 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

A vulnerabilitiy was identified in VMWare vCenter Server Appliance, a remote user could exploit this vulnerability to trigger sensitive information disclosure on the targeted system.

Impact

Information Disclosure

System / Technologies affected

vCenter Server Appliance 6.0, 6.5, 6.7

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
For detail, please refer to the link below:
https://www.vmware.com/security/advisories/VMSA-2019-0018.html

Vulnerability Identifier

CVE-2019-5537
CVE-2019-5538

Source

VMware
AusCERT