Security Advisory

CVE-2011-4404

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-11-19 02:00:00
Last updated 2024-08-07 00:09:18
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.