CVE-2008-4278: VMware Virtualcenter

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password.

Affected products

• VMware Virtualcenter: up to and including 2.5; version 1.4.1 only; version 2.0.1 only; version 2.0.2 only; version 2.5 only

Published 2008-10-06. Last modified 2026-06-16.