CVE-2018-6971
- State
- Published
- Severity
- Not scored
- Published
- Jul 25, 2018
- Updated
- Sep 17, 2024
- Reserved
- Feb 14, 2018
Description
VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Horizon View AgentVMware |
|
References
- 1041357vdb-entry
- 104883vdb-entry
- 1041358vdb-entry
- https://www.vmware.com/security/advisories/VMSA-2018-0018.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.