PT-2025-22131 · Vmware · Vmware Cloud Foundation

Published 2025-05-20 · Updated 2025-07-15 · CVE-2025-41230

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware Cloud Foundation (affected versions not specified)

Description The issue is an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information. The vulnerability can be exploited through the API endpoint related to port 443.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-10228

CVE-2025-41230

Affected Products

Vmware Cloud Foundation

References · 13

• https://bdu.fstec.ru/vul/2025-10228 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-41230 · Security Note
• https://twitter.com/autumn_good_35/status/1924794654865965367 · Twitter Post
• https://twitter.com/dailytechonx/status/1924887855337206187 · Twitter Post
• https://twitter.com/fletch_ai/status/1925114395946017043 · Twitter Post
• https://twitter.com/cracbot/status/1926594143175791005 · Twitter Post
• https://t.me/latest_high_impact_cve/2425 · Telegram Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25733 · Note
• https://t.me/cvenotify/123046 · Telegram Post
• https://twitter.com/khodaeifard/status/1925450875004137512 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1924825614575452505 · Twitter Post
• https://twitter.com/BlackpointUS/status/1924884549802095062 · Twitter Post
• https://twitter.com/CVEnew/status/1924823730103968034 · Twitter Post