CVE-2024-22240

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22240
Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may exploit this vulnerability leading to unauthorized access to sensitive information.

4.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.vmware.com/security/advisories/VMSA-2024-0002.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:vmware:aria_operations_for_networks:*:*:*:*:*:*:*:*
History

10 Feb 2024, 04:11

Type Values Removed Values Added
Summary
  • (es) Aria Operations for Networks contiene una vulnerabilidad de lectura de archivos locales. Un actor malintencionado con privilegios de administrador puede aprovechar esta vulnerabilidad y provocar acceso no autorizado a información confidencial.
CPE cpe:2.3:a:vmware:aria_operations_for_networks:*:*:*:*:*:*:*:*
First Time Vmware
Vmware aria Operations For Networks
References () https://www.vmware.com/security/advisories/VMSA-2024-0002.html - () https://www.vmware.com/security/advisories/VMSA-2024-0002.html - Vendor Advisory
CWE CWE-552

06 Feb 2024, 20:16

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 20:16

Updated : 2024-02-10 04:11

NVD link : CVE-2024-22240

Mitre link : CVE-2024-22240

CVE.ORG link : CVE-2024-22240

JSON object : View

Products Affected

vmware

  • aria_operations_for_networks
CWE
CWE-552

Files or Directories Accessible to External Parties