PT-2025-22130 · Vmware · Vmware Cloud Foundation

Published 2025-05-20 · Updated 2025-05-25 · CVE-2025-41229

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware Cloud Foundation (affected versions not specified)

Description The issue is a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to access certain internal services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-10227

CVE-2025-41229

Affected Products

Vmware Cloud Foundation

References · 15

• https://bdu.fstec.ru/vul/2025-10227 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-41229 · Security Note
• https://twitter.com/BlackpointUS/status/1924884548690526548 · Twitter Post
• https://twitter.com/transilienceai/status/1925184239621816641 · Twitter Post
• https://twitter.com/fletch_ai/status/1925114395946017043 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733 · Note
• https://twitter.com/VulmonFeeds/status/1924828174459793602 · Twitter Post
• https://twitter.com/khodaeifard/status/1925450875004137512 · Twitter Post
• https://t.me/cvenotify/123045 · Telegram Post
• https://twitter.com/autumn_good_35/status/1924794654865965367 · Twitter Post
• https://twitter.com/dailytechonx/status/1924887855337206187 · Twitter Post
• https://t.me/latest_high_impact_cve/2425 · Telegram Post
• https://twitter.com/CVEnew/status/1924823730984800621 · Twitter Post
• https://twitter.com/CCBalert/status/1925266020152774753 · Twitter Post
• https://twitter.com/cracbot/status/1926594141061828757 · Twitter Post