Seinwacht
Terug naar meldingen

CVE-2024-37085

VMware ESXi Authentication Bypass Vulnerability

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

Actief misbruikt. Toegevoegd aan de CISA KEV-catalogus op 30 jul. Vereiste actie: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Bekend gebruik in ransomwarecampagnes.

Meldingen over deze CVE

0 meldingen uit 0 bronnen, oudste eerst
    CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability | Seinwacht