VMSA-2024-0003

Advisory ID:
VMSA-2024-0003

CVSSv3 Range:
9.6 – 7.8

Issue Date:
2024-02-20

Updated On:
2024-02-20 (Initial Advisory)

CVE(s):
CVE-2024-22245, CVE-2024-22250

Synopsis:
Addressing Arbitrary Authentication Relay and Session Hijack Vulnerabilities in Deprecated VMware Enhanced Authentication Plug-in (EAP) (CVE-2024-22245, CVE-2024-22250)