7.8
Élevée
CVE-2024-22250 Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with…
Description
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware Enhanced Authentication Plug-in (EAP) | Versions non publiées | |
| enhanced_authentication_plugin 6.7 | premières → < 6.7.0 | 6.7.0 |