Read the docs
TI-2019-03936 Aliases CVE-2019-5531GHSA-7623-hj89-p4cw

Insufficient session expiration in VMware vSphere ESXi

Priority LOW 26CWE-613Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-613.

Summary

VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j) contain an information disclosure vulnerability in clients arising from insufficient session expiration. An attacker with physical access or an ability to mimic a websocket connection to a user’s browser may be able to obtain control of a VM Console after the user has logged out or their session has timed out.

Why it matters now

EPSS 0.00967 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareVMware vSphere ESXi6.7 prior to ESXi670-201810101-SG; 6.5 prior to ESXi650-201811102-SG; 6.0 prior to ESXi600-201807103-SG—No fix listedCNA
VMwareVMware vCenter Server6.7 prior to 6.7 U1b; 6.5 prior to 6.5 U2b; 6.0 prior to 6.0 U3j—No fix listedCNA
  • VMware vSphere ESXi VendorVMware Affected 6.7 prior to ESXi670-201810101-SG; 6.5 prior to ESXi650-201811102-SG; 6.0 prior to ESXi600-201807103-SG Fixed in — No fix listed CNA
  • VMware vCenter Server VendorVMware Affected 6.7 prior to 6.7 U1b; 6.5 prior to 6.5 U2b; 6.0 prior to 6.0 U3j Fixed in — No fix listed CNA

CPE configurations NVD · 68

CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*6.7 670-201811001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.7:*:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.7:update_1:*:*:*:*:*:*6.7 update_1VulnerableVMware
cpe:2.3:a:vmware:vsphere_esxi:6.5:a:*:*:*:*:*:*6.5 aVulnerableVMware
cpe:2.3:a:vmware:vsphere_esxi:6.5:u2:*:*:*:*:*:*6.5 u2VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:*:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201810002:*:*:*:*:*:*6.5 650-201810002VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201811001:*:*:*:*:*:*6.5 650-201811001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201811002:*:*:*:*:*:*6.5 650-201811002VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201901001:*:*:*:*:*:*6.5 650-201901001VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:* Versions 6.7 670-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.7:update_1:*:*:*:*:*:* Versions 6.7 update_1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vsphere_esxi:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vsphere_esxi:6.5:u2:*:*:*:*:*:* Versions 6.5 u2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201810002:*:*:*:*:*:* Versions 6.5 650-201810002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201811001:*:*:*:*:*:* Versions 6.5 650-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201811002:*:*:*:*:*:* Versions 6.5 650-201811002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201901001:*:*:*:*:*:* Versions 6.5 650-201901001 Vulnerable ·VMware
Show 58 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201903001:*:*:*:*:*:*6.5 650-201903001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201905001:*:*:*:*:*:*6.5 650-201905001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.5:update_1:*:*:*:*:*:*6.5 update_1VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:*:*:*:*:*:*:*6.0VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201810001:*:*:*:*:*:*6.0 600-201810001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201811001:*:*:*:*:*:*6.0 600-201811001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201903001:*:*:*:*:*:*6.0 600-201903001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201905001:*:*:*:*:*:*6.0 600-201905001VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:beta:*:*:*:*:*:*6.0 betaVulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:u1a:*:*:*:*:*:*6.0 u1aVulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:u1b:*:*:*:*:*:*6.0 u1bVulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:u3a:*:*:*:*:*:*6.0 u3aVulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:update_2:*:*:*:*:*:*6.0 update_2VulnerableVMware
cpe:2.3:o:vmware:vsphere_esxi:6.0:update_3:*:*:*:*:*:*6.0 update_3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:*6.0VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:a:*:*:*:*:*:*6.0 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:b:*:*:*:*:*:*6.0 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:u1:*:*:*:*:*:*6.0 u1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:u1b:*:*:*:*:*:*6.0 u1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:u3:*:*:*:*:*:*6.0 u3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update2:*:*:*:*:*:*6.0 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update2a:*:*:*:*:*:*6.0 update2aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update2m:*:*:*:*:*:*6.0 update2mVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3a:*:*:*:*:*:*6.0 update3aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3b:*:*:*:*:*:*6.0 update3bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3c:*:*:*:*:*:*6.0 update3cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3d:*:*:*:*:*:*6.0 update3dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3e:*:*:*:*:*:*6.0 update3eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3f:*:*:*:*:*:*6.0 update3fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3g:*:*:*:*:*:*6.0 update3gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3h:*:*:*:*:*:*6.0 update3hVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.0:update3i:*:*:*:*:*:*6.0 update3iVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:*:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*6.7 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*6.7 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:c:*:*:*:*:*:*6.7 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*6.7 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*6.7 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*6.7 update1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*6.7 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*6.7 update2aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*6.7 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*6.5 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*6.5 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*6.5 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*6.5 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*6.5 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*6.5 update1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*6.5 update1cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*6.5 update1dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*6.5 update1eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*6.5 update1gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*6.5 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*6.5 update2bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*6.5 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*6.5 update2dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*6.5 update2gVulnerableVMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201903001:*:*:*:*:*:* Versions 6.5 650-201903001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:650-201905001:*:*:*:*:*:* Versions 6.5 650-201905001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.5:update_1:*:*:*:*:*:* Versions 6.5 update_1 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201810001:*:*:*:*:*:* Versions 6.0 600-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201811001:*:*:*:*:*:* Versions 6.0 600-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201903001:*:*:*:*:*:* Versions 6.0 600-201903001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:600-201905001:*:*:*:*:*:* Versions 6.0 600-201905001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:beta:*:*:*:*:*:* Versions 6.0 beta Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:u1a:*:*:*:*:*:* Versions 6.0 u1a Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:u1b:*:*:*:*:*:* Versions 6.0 u1b Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:u3a:*:*:*:*:*:* Versions 6.0 u3a Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:update_2:*:*:*:*:*:* Versions 6.0 update_2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:vsphere_esxi:6.0:update_3:*:*:*:*:*:* Versions 6.0 update_3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:a:*:*:*:*:*:* Versions 6.0 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:b:*:*:*:*:*:* Versions 6.0 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:u1:*:*:*:*:*:* Versions 6.0 u1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:u1b:*:*:*:*:*:* Versions 6.0 u1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:u3:*:*:*:*:*:* Versions 6.0 u3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update2:*:*:*:*:*:* Versions 6.0 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update2a:*:*:*:*:*:* Versions 6.0 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update2m:*:*:*:*:*:* Versions 6.0 update2m Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3a:*:*:*:*:*:* Versions 6.0 update3a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3b:*:*:*:*:*:* Versions 6.0 update3b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3c:*:*:*:*:*:* Versions 6.0 update3c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3d:*:*:*:*:*:* Versions 6.0 update3d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3e:*:*:*:*:*:* Versions 6.0 update3e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3f:*:*:*:*:*:* Versions 6.0 update3f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3g:*:*:*:*:*:* Versions 6.0 update3g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3h:*:*:*:*:*:* Versions 6.0 update3h Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.0:update3i:*:*:*:*:*:* Versions 6.0 update3i Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:* Versions 6.7 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:* Versions 6.7 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:c:*:*:*:*:*:* Versions 6.7 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:* Versions 6.7 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:* Versions 6.7 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:* Versions 6.7 update1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:* Versions 6.7 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:* Versions 6.7 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:* Versions 6.7 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* Versions 6.5 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* Versions 6.5 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* Versions 6.5 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* Versions 6.5 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* Versions 6.5 update1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* Versions 6.5 update1c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* Versions 6.5 update1d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* Versions 6.5 update1e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* Versions 6.5 update1g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* Versions 6.5 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* Versions 6.5 update2b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* Versions 6.5 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* Versions 6.5 update2d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* Versions 6.5 update2g Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5531
  2. 2026-10-03 Alias added: GHSA-7623-hj89-p4cw

References

Other 1

  • TI-2020-03488 Use after free in VMware ESXi KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16135 Time-of-check time-of-use race condition in VMware ESXi KEVCVSS 3.1CRITICAL 9.3
  • TI-2025-16136 Out-of-bounds write in VMware ESXi KEVCVSS 3.1HIGH 8.2
  • TI-2010-03709 The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS)… KEVCVSS 3.1HIGH 7.8
  • TI-2024-24615 Authentication bypass in VMware ESXi KEVCVSS 3.1HIGH 7.2
See all 139 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences