CVE-2024-22256

2024-03-0710:08:20

vmware

www.cve.org

vmware

cloud director

information disclosure

vulnerability

organization names

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

Percentile

9.8%

JSON

VMware Cloud Director contains a partial information disclosure vulnerability. A malicious actor can potentially gather information about organization names based on the behavior of the instance.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "VMware Cloud Director",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Cloud Director 10.5.x, 10.4.x"
      }
    ]
  }
]