VMSA-2024-0003

Review ID:
VMSA-2024-0003

CVSSv3 range:
9.6 – 7.8

Date of issue:
2024-02-20

Updated:
2024-02-20 (Initial notice)

CVE(s):
CVE-2024-22245, CVE-2024-22250

Synopsis:
Addresses arbitrary authentication relay and session hijacking vulnerabilities in deprecated VMware Enhanced Authentication Plug-in (EAP) (CVE-2024-22245, CVE-2024-22250)