CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Information Exposure
Summary: vmware vcenter server (6.5 prior to 6.5 u1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-08-01
Last Modified Date: 2017-08-03