WID-SEC-W-2024-3132

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

VMware NSX und Cloud Foundation: Mehrere Schwachstellen

view advisory published 2024-10-09

Ein Angreifer kann mehrere Schwachstellen in VMware NSX und VMware Cloud Foundation ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen oder seine Rechte zu erhöhen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-38818US——
VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role t…
CVE-2024-38817US——
VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may be able to craft malicious payloads to execute arbitrary com…
CVE-2024-38815US——
VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan