NetSight
IP …
low2.1

CVE-2009-0518

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server pas…

Impact

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password.

Affected products

VendorProductAffected versions
VmwareVmware Esx
Version 3.5
VmwareVmware Esxi
Version 3.5
VmwareVmware Virtualcenter
Versions 1.1, 1.2, 1.3, 1.3.1, 1.4, 1.4.1

Weakness classification

CWE-200

References