Summary
Ein Angreifer kann mehrere Schwachstellen im VMware Enhanced Authentication Plug-in (EAP) ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder seine Berechtigungen zu erweitern.
Product
Das VMware Enhanced Authentication Plug-in (EAP) ist eine Komponente von VMware Horizon, die speziell dafür ausgelegt is, die Authentifizierung für Horizon-Verbindungen zu verbessern.
Vulnerabilities 2
-
Critical 9.6
Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin
Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and re…
-
High 7.8
Session Hijack Vulnerability in Deprecated EAP Browser Plugin
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the …
Revision history
-
#1
Initiale Fassung
References
-
Vmware Security Advisory vom 2024-02-22
https://www.vmware.com/security/advisories/VMSA-2024-0003.html