CVE-2024-22239
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 6, 2024
Updated: Feb 10, 2024
CWE ID 269
Summary
CVE-2024-22239 is a local privilege escalation vulnerability affecting Aria Operations for Networks. A console user with authorized access can leverage this issue to escalate their privileges, ultimately gaining regular shell access, potentially leading to unauthorized system modifications or data exfiltration. This vulnerability poses a significant risk to organizations utilizing this software and requires immediate attention and patching to mitigate potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- VMware Aria Operations for Networks
Affected Vendors
- VMware Inc.