VMware ESXi Shadow Copy Service Information Disclosure Vulnerability

VMware ESXi contains an information disclosure vulnerability in the Shadow Copy Service that could allow an attacker with local access to a host to access sensitive information from virtual machine snapshots. The Shadow Copy Service is used to create and manage point-in-time copies (snapshots) of virtual machines.

Due to improper access controls, an attacker with local access to the ESXi host could potentially access snapshot data from virtual machines, including memory dumps and disk snapshots that may contain sensitive information such as credentials, encryption keys, or confidential data.

This vulnerability affects the snapshot management functionality in ESXi and could lead to unauthorized access to sensitive data across multiple virtual machines hosted on the affected ESXi server.