7.8
High
CVE-2024-22250 Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with…
Description
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Enhanced Authentication Plug-in (EAP) | Versions not published | |
| enhanced_authentication_plugin 6.7 | earliest → < 6.7.0 | 6.7.0 |