CVE-2024-38831
published 2024-11-26CVE-2024-38831: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious…
PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.29%
21.1th percentile
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the properties file to escalate privileges to a root user on the appliance running VMware Aria Operations.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | aria_operations | >= 8.0 < 8.18.2 | 8.18.2 |
| vmware | cloud_foundation | 4.0 – 5.2 | — |
| vmware | vmware_aria_operations | >= 8.x < 8.18.2 | 8.18.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cisa7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7mjq-fcrm-26pg: VMware Aria Operations contains a local privilege escalation vulnerability
ghsa_unreviewed·2024-11-26
CVE-2024-38831 [HIGH] CWE-77 GHSA-7mjq-fcrm-26pg: VMware Aria Operations contains a local privilege escalation vulnerability
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can insert malicious commands into the properties file to escalate privileges to a root user on the appliance running VMware Aria Operations.
CISA
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
cisa·2024-04-30·CVSS 7.8
CVE-2024-29988 [HIGH] CWE-693 Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Vulnerability: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Affected: Microsoft SmartScreen Prompt
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988; https://nvd.nist.gov/vuln/detail/CVE-2024-29988
Remediation Due Date: 2024-05-21
No detection rules found.
No public exploits indexed.
2024-11-26
Published