VMware Xenon 1.x prior to 1.5.4-CR7_1 1.5.7_7 1.5.4-CR6_2 1.3.7-CR1_2 1.1.0-CR0-3 1.1.0-CR3_1 1.4.2-CR4_1 and 1.5.4_8 contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.