← Back

CVE-2008-4278

nvd nist
Published: Oct 6, 2008Modified: Apr 23, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.

Affected (9)

Vmware
1 product
Virtualcenter
Configuration A
9 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Vmware
Virtualcenter
Up to 2.5
Virtualcenter
Version 1.4.1
Virtualcenter
Version 2.0.1
Virtualcenter
Version 2.0.2
Virtualcenter
Version 2.0.2 update_2
Virtualcenter
Version 2.0.2 update_3
Virtualcenter
Version 2.0.2 update_4
Virtualcenter
Version 2.5
Virtualcenter
Version 2.5 update_1
Running on/withPlatform Versions
Vmware
Virtual Infrastructure Client
All versions
Vmware
Virtualcenter
Version 2.0 unknown
Microsoft
Windows
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.