| Package | Affected versions | Patched versions |
|---|---|---|
| xenon | = 1.1.0= 1.3.7= 1.4.2= 1.5.4= 1.5.4_8= 1.5.7_7≥ 1.0.0, ≤ 1.5.3 |
VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free