CVE-2025-41230 VMware Cloud Foundation Information Disclosure Vulnerability
A remote attacker with network access can exploit this vulnerability to access sensitive information in VMware Cloud Foundation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41230?
CVE-2025-41230 is a high-severity vulnerability in VMware Cloud Foundation, published on 20 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit this issue to gain access to sensitive information.
Weakness: CWE-200
Which versions are affected by CVE-2025-41230?
How do I fix CVE-2025-41230?
No fix has been published for CVE-2025-41230 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-41230 being exploited?
There is no known exploitation of CVE-2025-41230 in the wild and no public exploit code.
Sources
Also known as GHSA-8hm3-3px2-4xp9.