CVE-2024-22275

EPSS 0.99%
Veröffentlicht 21.05.2024 18:15:09
Zuletzt bearbeitet 27.06.2025 13:38:06
Erkennungen
Login

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 43 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ Cloud Foundation Version >= 4.0 < 5.1.1

VMware ≫ vCenter Server Version 7.0 Update -

VMware ≫ vCenter Server Version 7.0 Update a

VMware ≫ vCenter Server Version 7.0 Update b

VMware ≫ vCenter Server Version 7.0 Update c

VMware ≫ vCenter Server Version 7.0 Update d

VMware ≫ vCenter Server Version 7.0 Update update1

VMware ≫ vCenter Server Version 7.0 Update update1a

VMware ≫ vCenter Server Version 7.0 Update update1c

VMware ≫ vCenter Server Version 7.0 Update update1d

VMware ≫ vCenter Server Version 7.0 Update update2

VMware ≫ vCenter Server Version 7.0 Update update2a

VMware ≫ vCenter Server Version 7.0 Update update2b

VMware ≫ vCenter Server Version 7.0 Update update2c

VMware ≫ vCenter Server Version 7.0 Update update2d

VMware ≫ vCenter Server Version 7.0 Update update3

VMware ≫ vCenter Server Version 7.0 Update update3a

VMware ≫ vCenter Server Version 7.0 Update update3c

VMware ≫ vCenter Server Version 7.0 Update update3d

VMware ≫ vCenter Server Version 7.0 Update update3e

VMware ≫ vCenter Server Version 7.0 Update update3f

VMware ≫ vCenter Server Version 7.0 Update update3g

VMware ≫ vCenter Server Version 7.0 Update update3h

VMware ≫ vCenter Server Version 7.0 Update update3i

VMware ≫ vCenter Server Version 7.0 Update update3j

VMware ≫ vCenter Server Version 7.0 Update update3k

VMware ≫ vCenter Server Version 7.0 Update update3l

VMware ≫ vCenter Server Version 7.0 Update update3m

VMware ≫ vCenter Server Version 7.0 Update update3n

VMware ≫ vCenter Server Version 7.0 Update update3o

VMware ≫ vCenter Server Version 7.0 Update update3p

VMware ≫ vCenter Server Version 8.0 Update -

VMware ≫ vCenter Server Version 8.0 Update a

VMware ≫ vCenter Server Version 8.0 Update b

VMware ≫ vCenter Server Version 8.0 Update c

VMware ≫ vCenter Server Version 8.0 Update update1

VMware ≫ vCenter Server Version 8.0 Update update1a

VMware ≫ vCenter Server Version 8.0 Update update1b

VMware ≫ vCenter Server Version 8.0 Update update1c

VMware ≫ vCenter Server Version 8.0 Update update1d

VMware ≫ vCenter Server Version 8.0 Update update1e

VMware ≫ vCenter Server Version 8.0 Update update2

VMware ≫ vCenter Server Version 8.0 Update update2a

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.99%	0.594

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
VMware	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-22275

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-22275

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-22275

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-22275