CVE-2023-34060

The VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060) specifically affecting instances upgraded to version 10.5 from an older version. The flaw resides in the sssd component of the underlying Photon OS . A malicious actor with network access can bypa...

CVE-2024-22256

CVE-2024-22256 affects VMware Cloud Director. The vulnerability is a partial information disclosure that could allow a malicious actor to gather information about organization names based on the instance’s behavior. According to VMware’s advisory and related sources, the issue has a CVSSv3 base s...

CVE-2024-22277

CVE-2024-22277 affects VMware Cloud Director Availability. An HTML injection vulnerability allows a network-authenticated attacker to craft malicious HTML tags that execute within replication tasks. The issue is addressed by VMware in the 4.7.2 release; advisory indicates affected product lines i...