CVE-2012-5978

CVE-2012-5978 describes multiple directory traversal vulnerabilities in VMware View 4.x before 4.6.2 and 5.x before 5.1.2, specifically impacting the View Connection Server and View Security Server. This vulnerability allows remote attackers to read arbitrary files, with a CVSS score of 5.0 indicating a medium severity. The attack requires no authentication (AV:N/AC:L/Au:N), and its primary impact is confidentiality (C:P), with no integrity or availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Despite this, the CVE has garnered some community discussion and media coverage, suggesting a degree of awareness within the security community.