CVE-2012-6325 in vCenter

Sumário

de MITRE

VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 10/12/2012
• Divulgação: 21/12/2012
• Moderação: aceite
• Entrada: VDB-7194
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 4.0 (NVD)
• EPSS: 0.00947
• KEV: não
• Atividades: muito baixo
• Sector: Police, Hospital, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-6325
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-6325
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-6325/