6.7

CVE-2024-38818

VMware NSX contains a local privilege escalation vulnerability. 

An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorvmware
≫
Product nsx
Default Statusunknown
Version < 4.2.1
Version 4.1.0
Status affected
Vendorvmware
≫
Product nsx-t
Default Statusunknown
Version < 3.2.4.1
Version 3.2.0
Status affected
Vendorvmware
≫
Product cloud_foundation
Default Statusunknown
Version < Async_Patch_to_4.2.1
Version 5.0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.199
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security@vmware.com 6.7 1.2 5.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.