CVE-2019-5534

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A malicious actor with access to query the vAppConfig properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine).

• CWE-200
• CWE-522

• http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.htmlThird Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2019-0013.htmlVendor Advisory
• http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.htmlThird Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2019-0013.htmlVendor Advisory

Published

Sep 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5527ESXi, Workstation, Fusion, VMRC and Horizon Client contain a…8.8
• CVE-2019-5528VMware ESXi 6.5 suffers from partial denial of service vulne…5.3
• CVE-2019-5530Windows binaries generated with InstallBuilder versions earl…
• CVE-2019-5531VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 …5.4
• CVE-2019-5532VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6…7.7
• CVE-2019-5533In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, t…4.3
• CVE-2019-5535VMware Workstation and Fusion contain a network denial-of-se…4.7
• CVE-2019-5536VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before …6.5
• CVE-2019-5537Sensitive information disclosure vulnerability resulting fro…5.9
• CVE-2019-5538Sensitive information disclosure vulnerability resulting fro…5.9
• CVE-2019-5539VMware Workstation (15.x prior to 15.5.1) and Horizon View A…7.8
• CVE-2019-5540VMware Workstation (15.x before 15.5.1) and Fusion (11.x bef…7.7