6.7

CVE-2024-38818

VMware NSX contains a local privilege escalation vulnerability. 

An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellervmware
≫
Produkt nsx
Default Statusunknown
Version 4.1.0
Version < 4.2.1
Status affected
Herstellervmware
≫
Produkt nsx-t
Default Statusunknown
Version 3.2.0
Version < 3.2.4.1
Status affected
Herstellervmware
≫
Produkt cloud_foundation
Default Statusunknown
Version 5.0
Version < Async_Patch_to_4.2.1
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.335
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@vmware.com 6.7 1.2 5.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.