Lucene search

K
vulnrichmentVmwareVULNRICHMENT:CVE-2024-22260
HistoryJun 27, 2024 - 8:18 p.m.

CVE-2024-22260

2024-06-2720:18:58
vmware
github.com
4
vmware
uem
information exposure
vulnerability
network access
attack

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

VMware Workspace One UEM update addresses an information exposure vulnerability. 
A malicious actor with network access to the Workspace One UEM may be
able to perform an attack resulting in an information exposure.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vmware",
    "product": "workspace_one_uem",
    "versions": [
      {
        "status": "affected",
        "version": "23.10x"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vmware",
    "product": "workspace_one_uem",
    "versions": [
      {
        "status": "affected",
        "version": "23.6x"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vmware",
    "product": "workspace_one_uem",
    "versions": [
      {
        "status": "affected",
        "version": "23.4x"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vmware",
    "product": "workspace_one_uem",
    "versions": [
      {
        "status": "affected",
        "version": "22.12x"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-22260