VULNERABILITY INTELLIGENCE
CVE-2008-4278
CVSS score2.1 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2008-10-06
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor