Unscored severity · published Mar 16, 2012
CVE-2012-1513
The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VO
Vcenter Orchestrator · Vmware
4.0; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1513
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1513
osvdb.org
http://osvdb.org/80120
secunia.com
http://secunia.com/advisories/48408
www.securityfocus.com
http://www.securityfocus.com/bid/52525
www.securitytracker.com
http://www.securitytracker.com/id?1026816
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2012-0005.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74091
More from Vcenter Orchestrator
7.3
CVE-2015-6934
Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery…