CVE-2024-22239

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Feb 6, 2024
Updated: Feb 10, 2024
CWE ID 269

Summary

CVE-2024-22239 is a local privilege escalation vulnerability affecting Aria Operations for Networks. A console user with authorized access can leverage this issue to escalate their privileges, ultimately gaining regular shell access, potentially leading to unauthorized system modifications or data exfiltration. This vulnerability poses a significant risk to organizations utilizing this software and requires immediate attention and patching to mitigate potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • VMware Aria Operations for Networks

Affected Vendors

  • VMware Inc.