All vulnerabilities

Servers and applications

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.

Severity
Medium 4.9
Published
21 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware vCenter ServerServers and applications · cpe:a:vmware:vcenter_server
  • Version 8.0-update2
  • Version 8.0-update1e
  • Version 8.0-update1d
  • Version 8.0-update1
All 42 release lines
  • Version 7.0-a
  • Version 7.0-b
  • Version 7.0-c
  • Version 7.0-update1a
  • Version 7.0-update1c
  • Version 7.0-update2a
  • Version 7.0-update2b
  • Version 7.0-update2c
  • Version 7.0-update3a
  • Version 7.0-update3c
  • Version 7.0
  • Version 7.0-d
  • Version 7.0-update1
  • Version 7.0-update1d
  • Version 7.0-update2
  • Version 7.0-update2d
  • Version 7.0-update3
  • Version 7.0-update3d
  • Version 7.0-update3e
  • Version 7.0-update3f
  • Version 7.0-update3g
  • Version 7.0-update3h
  • Version 7.0-update3i
  • Version 7.0-update3j
  • Version 7.0-update3k
  • Version 7.0-update3l
  • Version 7.0-update3m
  • Version 7.0-update3n
  • Version 7.0-update3o
  • Version 7.0-update3p
  • Version 8.0-a
  • Version 8.0-b
  • Version 8.0-c
  • Version 8.0-update1a
  • Version 8.0-update1b
  • Version 8.0-update1c
  • Version 8.0-update2a
  • Version 8.0
  • Version 8.0-update1
  • Version 8.0-update1d
  • Version 8.0-update1e
  • Version 8.0-update2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-22275
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-22275