CVE-2022-31697
Assigner: vmware
Published: 2022-12-13T00:00:00
State: PUBLISHED
descriptions: value: The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
affected: vendor: n/a
product: VMware vCenter Server, VMware Cloud Foundation
versions: version: VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x)
status: affected
problemTypes: descriptions: type: text
description: Information disclosure vulnerability