CVE-2011-1788

Published: May 9, 2011Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors.

Affected (4)

Products: Vmware: Vcenter

Vmware

1 product

Vcenter

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Vcenter	Version 4.0
Vmware Vcenter	Version 4.0 update_1
Vmware Vcenter	Version 4.0 update_2
Vmware Vcenter	Version 4.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://lists.vmware.com/pipermail/security-announce/2011/000137.html

Source: cve@mitre.org

http://osvdb.org/72179

Source: cve@mitre.org

http://securitytracker.com/id?1025502

Source: cve@mitre.org

http://www.securityfocus.com/bid/47742

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2011-0008.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/67304

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2011/000137.html