Vulnerability in Vmware Vcenter Server

CVE-2019-5532

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtual machines deployed through OVF. A malic…

EPSS: 0.005 (64.7th percentile) — read the EPSS interpretation.

Affected products

Vmware Vcenter Server — versions 6.7 prior to 6.7 U3, 6.5 prior to 6.5 U3, 6.0 prior to 6.0 U3j

References

www.vmware.com/security/advisories/VMSA-2019-0013.html (x_refsource_CONFIRM)
packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html (x_refsource_MISC)