CVE-2010-2928: VMware vCenter Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file.

Affected products

• VMware vCenter Server: version 4.1 only

Published 2011-02-16. Last modified 2026-06-16.