high7.3
CVE-2025-41231
VMware Cloud Foundation contains a missing authorisation vulnerability.
Impact
VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 4.5 before 4.5.2 from 5.0 before 5.2.1.2 |