Servers and applications
CVE-2017-4922
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted.
- Severity
- Medium 6.5
- Published
- 1 Aug 2017
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 1.3% in the next 30 daysHigher than 71% of CVEs. EPSS by FIRST, 11 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
VMware vCenter ServerServers and applications · cpe:a:vmware:vcenter_server |
|