VMware Cloud Director contains an Improper Privilege... · CVE-2024-22272 · GitHub Advisory Database · GitHub

VMware Cloud Director contains an Improper Privilege...

Moderate severity Unreviewed Published Jun 27, 2024 to the GitHub Advisory Database • Updated Jun 27, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

VMware Cloud Director contains an Improper Privilege Management vulnerability.

An authenticated tenant administrator for a
given organization within VMware Cloud Director may be able to
accidentally disable their organization leading to a Denial of Service
for active sessions within their own organization's scope.

References

Published by the National Vulnerability Database

Jun 27, 2024

Published to the GitHub Advisory Database Jun 27, 2024

Last updated Jun 27, 2024

Severity

Moderate

4.9

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H