← Database

CVE-2008-4278

LOW CVSS: 2.1 Published: 2008-10-06 Modified: 2026-06-16

Description

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.

Affected Platforms

Microsoft WindowsVmware VirtualcenterVmware Virtual Infrastructure Client

Weakness Type

CWE-200

References