VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: vmware
Published: 2018-07-25T13:00:00Z
Updated: 2024-09-17T03:39:03.443Z
Reserved: 2018-02-14T00:00:00
Link: CVE-2018-6971
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-07-25T13:29:00.300
Modified: 2019-10-03T00:03:26.223
Link: CVE-2018-6971
Redhat
No data.