VMware vCenter Arbitrary File Read

VMware vCenter Server is advanced server management software that provides a centralized platform for controlling your VMware vSphere environments, allowing you to automate and deliver a virtual infrastructure across the hybrid cloud with confidence. A remote attacker who successfully exploited this vulnerability can read arbitrary files on the target system.

Affected version: VMware vCenter 6.5.0

FOFA query rule: app="VMware-VirtualCenter" || app="VMware-vCenter"

README.md

VMware vCenter Arbitrary File Read

Demo