Skip to content
fr Sign in
4.3 Medium

CVE-2024-38815 VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and…

Description

VMware NSX contains a content spoofing vulnerability.  An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive information disclosure.

Affected products and versions

Product Affected versions Fixed in
VMware NSX, VMware Cloud Foundation Versions not published
NSX 4.1 4.1.0 → < 4.2.1 4.2.1
nsx-t 3.2 3.2.0 → < 3.2.4.1 3.2.4.1
cloud_foundation 5.0 5.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of VMware NSX, VMware Cloud Foundation

The 3 CVEs of VMware NSX, VMware Cloud Foundation →
CVE-2024-38818 VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this… 6.7 Medium CVE-2024-38817 VMware NSX contains a command injection vulnerability.  A malicious actor with access to the NSX Edge CLI terminal may… 6.7 Medium
Track this CVE