| Package | Affected versions | Patched versions |
|---|---|---|
| vcenter orchestrator | = 4.0= 4.1 |
The Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free