Authentication flaw

2024-02-2018:15:00

PRIOn knowledge base

www.prio-n.com

authentication

vulnerabilities

vmware

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).