| Package | Affected versions | Patched versions |
|---|---|---|
| vce vision intelligent operations | ≤ 2.6.4 |
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover the admin user password by sniffing the network.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free