CVE-2025-41229 in Cloud Foundation

Résumé

par MITRE • 20/05/2025

VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Vmware
• Réserver: 16/04/2025
• Divulgation: 20/05/2025
• Modérer: accepté
• Entrée: VDB-309655
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 8.2 (CNA)
• EPSS: 0.00664
• KEV: non
• Activités: très faible
• Secteur: Government, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-41229
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-41229
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-41229/