VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
| Vendor | Product | Versions |
|---|---|---|
| vmware | vcenter_server | 9.1.x.x, 9.0.x.x, 5.x, 9.1.x.x, 9.0.x.x, 9.1.x.x, 9.0.x.x, 8.0, 3.0, 5.1.x, 5.0.x, 4.x, 3.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| vmware | vsphere foundation | mitre_affected | 90% |
| vmware | vcenter | mitre_affected | 90% |
| vmware | telco cloud infrastructure | mitre_affected | 90% |
| vmware | telco cloud | mitre_affected | 90% |
| vmware | telco_cloud_infrastructure | cve_cpe | 95% |
