Skip to content
OpenAdvisories

Product · VMware

VMware Enhanced Authentication Plug-in (EAP)

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.6

    Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

    Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and re…