← Back

CVE-2025-41231

nvd nist
Published: May 20, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Exploitability: 2.5 / Impact: 4.7
Source: security@vmware.com (Secondary)

Description

VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perform certain unauthorised actions and access limited sensitive information.

Affected (2)

Vmware
1 product
Cloud Foundation
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 4.5 to 4.5.2
Cloud Foundation
From 5.0 to 5.2.1.2

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.