Administrator password exposed on Aria Automation Deployed Windows VM due to mounted ovf-env.xml

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

 When we deploy Windows deployments through Aria Automation. For the Windows deployments, we are seeing ovf-env.xml being mounted as a cd/drive inside the VM, which has the administrator password and username in clear text, exposing the administrator details to all users.

Environment

Aria Automation 8.18.1

Resolution

Resolution

To resolve this issue, please contact Broadcom Support and note this Article ID (416832) in the problem description.

• For more information, see Creating and managing Broadcom support cases.