CVE-2024-22256 — Sensitive Information Exposure in Vmware Cloud Director

4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 34.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Cloud Director
Timeline
PublishedMar 7

Description

VMware Cloud Director contains a partial information disclosure vulnerability. A malicious actor can potentially gather information about organization names based on the behavior of the instance.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶NVDvmware/cloud_director10.4.0 — 10.5.1.1

Patches

Patch: www.vmware.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2024-22256: VMware Cloud Director contains a partial information disclosure vulnerability↗2024-03-07
▶
GHSA
GHSA-m7hf-5mp8-h9g2: VMware Cloud Director contains a partial information disclosure vulnerability↗2024-03-07
▶

📋Vendor Advisories

1
VMware
VMware Cloud Director updates address a partial information disclosure vulnerability (CVE-2024-22256).↗
▶
CVE-2024-22256 — Sensitive Information Exposure | cvebase