CVE-2011-4404

The record

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523.

Affected packages

Related vulnerabilities

• CVE-2026-4433 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of… CWE-16
• CVE-2013-1451 Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same… CWE-16
• CVE-2011-2730 VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before… CWE-16
• CVE-2012-5613 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other… CWE-16
• CVE-2012-0147 Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not… CWE-16
• CVE-2011-1652 The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and… CWE-16
• CVE-2009-0696 The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5… CWE-16
• CVE-2009-2335 WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login… CWE-16