Medium

Analysis Summary

CVE-2024-22272 CVSS:4.9

VMware Cloud Director is vulnerable to a denial of service, caused by an improper privilege management vulnerability. A remote authenticated attacker could exploit this vulnerability to accidentally disable their organization, resulting in a denial of service.

CVE-2024-22276 CVSS:5.3

VMware Cloud Director Object Storage Extension could allow a remote attacker from within the local network to obtain sensitive information, caused by an insertion of sensitive information vulnerability. An attacker could exploit this vulnerability to obtain sensitive information from URLs that are logged.

Impact

• Denial of Service
• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-22272
• CVE-2024-22276

Affected Vendors

Affected Products

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

CVE-2024-22272

CVE-2024-22276