CVE Catalog
CVE-2017-4923
CriticalSummary
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.
Risk Assessment
The disclosure of plaintext credentials may lead to unauthorized access to the organization's systems and data, posing a significant security risk.
Recommendation
It is recommended to upgrade to version 6.5 U1 or later to mitigate this vulnerability and review backup security.
Original NVD description (English source)
VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature.