Description
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 3.x before 3.10.1.2 | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 4.x before 4.2 | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 6.5 before 6.5 U3n | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 6.7 before 6.7 U3l | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | 7.x before 7.0 U1c | affected |