CVE-2012-6325

VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2012-12-21

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Vcenter Server Appliance (Vmware)

References

• http://www.vmware.com/security/advisories/VMSA-2012-0018.html