Paper/Archive/CVE-2024-22245

CVE-2024-22245

VMware VMware Enhanced Authentication Plug-in (EAP) — Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

EPSS 1%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 69.7.697 × 2013.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).

Affected

ProductAffectedFixed inSource

VMware Enhanced Authentication Plug-in (EAP)All–CNA

enhanced_authentication_plugin< 6.7.06.7.0CISA-ADP

Scores by source

vmware (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2024-0003.html