medium5.5
CVE-2022-31697
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext.
Impact
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstation that invoked a vCenter Server Appliance ISO operation (Install/Upgrade/Migrate/Restore) can access plaintext passwords used during that operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vcenter Server | Versions 6.5, 6.7, 7.0 |
| Vmware | Cloud Foundation | from 3.0 |