Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lead to full control of the router. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0008.html
CVE ID: CVE-2024-22247 State: PUBLISHED Published: 2024-04-02T15:49:41.694Z Last Updated: 2024-08-01T22:43:33.699Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: N/A Products: VMware SD-WAN Edge Problem Types: Missing Authentication and Protection Mechanism vulnerability in SD-WAN Edge Description: VMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A malicious actor with physical access to the SD-WAN Edge appliance during activation can potentially exploit this vulnerability to access the BIOS configuration. In addition, the malicious actor may be able to exploit the default boot priority configured. Additional Anal
iguration. In addition, the malicious actor may be able to exploit the default boot priority configured. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0008.html
CVE ID: CVE-2024-22248 State: PUBLISHED Published: 2024-04-02T15:51:06.782Z Last Updated: 2024-11-01T15:52:09.920Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: N/A Products: VMware SD-WAN Orchestrator Problem Types: Open redirect vulnerability in SD-WAN Orchestrator Description: VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0008.html
CVE ID: CVE-2024-22250 State: PUBLISHED Published: 2024-02-20T17:35:23.481Z Last Updated: 2024-08-27T15:18:24.440Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: VMware Products: VMware Enhanced Authentication Plug-in (EAP) Problem Types: CWE-384 Description: Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VM
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2024-0003.html
CVE ID: CVE-2024-22251 State: PUBLISHED Published: 2024-02-27T17:35:31.786Z Last Updated: 2024-11-01T19:23:51.458Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: VMware Workstation, VMware Fusion Description: VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2024-0005.html
CVE ID: CVE-2024-22252 State: PUBLISHED Published: 2024-03-05T17:57:22.043Z Last Updated: 2025-03-27T19:50:25.416Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: VMware ESXi, VMware Workstation, VMware Fusion, VMware Cloud Foundation Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execu
Xi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE ID: CVE-2024-22253 State: PUBLISHED Published: 2024-03-05T17:57:27.297Z Last Updated: 2024-08-16T19:12:32.633Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: VMware ESXi, VMware Workstation, VMware Fusion, VMware Cloud Foundation Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execu
CVE ID: CVE-2024-22254 State: PUBLISHED Published: 2024-03-05T17:58:24.341Z Last Updated: 2024-08-14T18:53:20.387Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: VMware ESXi, VMware Cloud Foundation Description: VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE ID: CVE-2024-22255 State: PUBLISHED Published: 2024-03-05T17:58:35.987Z Last Updated: 2025-08-26T20:15:06.691Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: VMware ESXi, VMware Workstation, VMware Fusion, VMware Cloud Foundation Description: VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0006.html
CVE ID: CVE-2024-22256 State: PUBLISHED Published: 2024-03-07T10:08:20.579Z Last Updated: 2025-03-27T15:00:02.690Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: VMware Cloud Director Description: VMware Cloud Director contains a partial information disclosure vulnerability. A malicious actor can potentially gather information about organization names based on the behavior of the instance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2024-0007.html
CVE ID: CVE-2024-22257 State: PUBLISHED Published: 2024-03-18T14:18:52.986Z Last Updated: 2025-02-13T17:33:39.030Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: N/A Products: Spring Security Problem Types: Possible Broken Access Control in Spring Security With Direct Use of AuthenticatedVoter Description: In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter. Additional Analyst Notes: - CISA ADP
directly uses the AuthenticatedVoter#vote passing a null Authentication parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2024-22257 - https://security.netapp.com/advisory/ntap-20240419-0005/
CVE ID: CVE-2024-22258 State: PUBLISHED Published: 2024-03-20T03:58:13.125Z Last Updated: 2024-12-05T20:31:25.882Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Spring Products: Spring Description: Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - 1.1.5, 1.2.0 - 1.2.2 and older unsupported versions are susceptible to a PKCE Downgrade Attack for Confidential Clients. Specifically, an application is vulnerable when a Confidential Client uses PKCE for the Authorization Code Grant. An application is not vulnerable when a Public Client uses PKCE for the Authorization Code Grant. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
nt uses PKCE for the Authorization Code Grant. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://spring.io/security/cve-2024-22258
CVE ID: CVE-2024-22259 State: PUBLISHED Published: 2024-03-16T04:40:08.680Z Last Updated: 2025-02-13T17:33:39.598Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Spring Products: Spring Framework Description: Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks. This is the same as CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different inpu
alidation checks. This is the same as CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2024-22259 - https://security.netapp.com/advisory/ntap-20240524-0002/
CVE ID: CVE-2024-22260 State: PUBLISHED Published: 2024-06-27T20:18:58.176Z Last Updated: 2025-03-19T17:17:41.489Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: N/A Products: VMware Workspace One UEM Problem Types: Information exposure vulnerability Description: VMware Workspace One UEM update addresses an information exposure vulnerability. A malicious actor with network access to the Workspace One UEM may be able to perform an attack resulting in an information exposure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.vmware.com/security/advisories/OMSA-2024-0001.html
CVE ID: CVE-2024-22261 State: PUBLISHED Published: 2024-06-10T23:25:32.158Z Last Updated: 2024-08-01T22:43:34.096Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Harbor Products: Harbor Problem Types: CWE-566 Description: SQL-Injection in Harbor allows priviledge users to leak the task IDs Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-vw63-824v-qf2j
CVE ID: CVE-2024-22262 State: PUBLISHED Published: 2024-04-16T05:54:12.786Z Last Updated: 2025-02-13T17:33:40.239Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Spring Products: Spring Framework Description: Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks. This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259 and CVE-2024-22243 https://spring.io/security
is is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259 and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2024-22262 - https://security.netapp.com/advisory/ntap-20240524-0003/
CVE ID: CVE-2024-22263 State: PUBLISHED Published: 2024-06-19T14:48:10.644Z Last Updated: 2024-08-01T22:43:33.729Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Spring by VMware Tanzu Products: Spring Cloud Skipper Problem Types: Improper sanitization for upload path Description: Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system,
as access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2024-22263
CVE ID: CVE-2024-22264 State: PUBLISHED Published: 2024-05-08T03:57:31.985Z Last Updated: 2025-03-27T20:21:17.897Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: VMware Products: VMware Avi Load Balancer Description: VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMware Avi Load Balancer can create, modify, execute and delete files as a root user on the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24219
CVE ID: CVE-2024-22266 State: PUBLISHED Published: 2024-05-08T03:59:30.675Z Last Updated: 2024-11-15T19:15:19.472Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: VMware Products: VMware Avi Load Balancer Description: VMware Avi Load Balancer contains an information disclosure vulnerability. A malicious actor with access to the system logs can view cloud connection credentials in plaintext. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24219
CVE ID: CVE-2024-22267 State: PUBLISHED Published: 2024-05-14T12:58:31.261Z Last Updated: 2025-03-14T14:56:10.154Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NA, N/A Products: VMware Workstation, VMware Fusion Problem Types: Use-after-free vulnerability Description: VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/e
tional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE ID: CVE-2024-22268 State: PUBLISHED Published: 2024-05-14T12:58:50.881Z Last Updated: 2025-03-27T15:00:11.156Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: N/A Products: VMware Workstation, VMware Fusion Problem Types: Heap buffer-overflow vulnerability Description: VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadc
dition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE ID: CVE-2024-22269 State: PUBLISHED Published: 2024-05-14T12:59:28.869Z Last Updated: 2024-08-01T22:43:33.677Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: N/A Products: VMware Workstation, VMware Fusion Problem Types: Information disclosure vulnerability Description: VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom
hine. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE ID: CVE-2024-22270 State: PUBLISHED Published: 2024-05-14T12:59:55.158Z Last Updated: 2024-08-15T18:42:55.863Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: N/A Products: VMware Workstation, VMware Fusion Problem Types: Information disclosure vulnerability Description: VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
r memory from a virtual machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280
CVE ID: CVE-2024-22271 State: PUBLISHED Published: 2024-07-09T12:50:15.845Z Last Updated: 2024-08-01T22:43:34.197Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Spring by VMware Tanzu Products: Spring Cloud Function Framework Problem Types: Web DOS Vulnerability Description: In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the following are true: User is using Spring Cloud Function Web module Affected Spring Products and Versions Spring Cloud Function Frame
e true: User is using Spring Cloud Function Web module Affected Spring Products and Versions Spring Cloud Function Framework 4.1.0 to 4.1.2 4.0.0 to 4.0.8 References https://spring.io/security/cve-2022-22979 https://checkmarx.com/blog/spring-function-cloud-dos-cve-2022-22979-and-unintended-function-invocation/ History 2020-01-16: Initial vulnerability report published. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://spring.io/security/cve-2024-22271
CVE ID: CVE-2024-22272 State: PUBLISHED Published: 2024-06-27T20:22:17.660Z Last Updated: 2024-12-02T17:41:22.527Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: N/A Products: VMware Cloud Director Problem Types: Improper Privilege Management Description: VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware Cloud Director may be able to accidentally disable their organization leading to a Denial of Service for active sessions within their own organization's scope. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
own organization's scope. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24371
CVE ID: CVE-2024-22273 State: PUBLISHED Published: 2024-05-21T17:29:05.426Z Last Updated: 2025-03-26T16:04:29.446Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: VMware ESXi, VMware Workstation, VMware Fusion, VMware Cloud Foundation (ESXi) Problem Types: Out-of-bounds read/write vulnerability Description: The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues
a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE ID: CVE-2024-22274 State: PUBLISHED Published: 2024-05-21T17:29:33.899Z Last Updated: 2024-08-01T22:43:34.161Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation (vCenter Server) Problem Types: Authenticated remote-code execution vulnerability Description: The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supp
operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE ID: CVE-2024-22275 State: PUBLISHED Published: 2024-05-21T17:29:45.562Z Last Updated: 2025-03-27T19:25:13.775Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation (vCenter Server) Problem Types: Partial file read vulnerability Description: The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-con
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
CVE ID: CVE-2024-22276 State: PUBLISHED Published: 2024-06-27T20:25:08.216Z Last Updated: 2024-10-31T14:52:26.897Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: N/A Products: VMware Cloud Director Object Storage Extension Problem Types: Insertion of Sensitive Information into Log File Description: VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/proxy server logging may be able to obtain sensitive information from URLs that are logged. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com
. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24372