CVE-2024-22256

MEDIUM

VMware Cloud Director - Info Disclosure

Title source: llm

Description

VMware Cloud Director contains a partial information disclosure vulnerability. A malicious actor can potentially gather information about organization names based on the behavior of the instance.

References (1)

[Patch, Vendor Advisory] https://www.vmware.com/security/advisories/VMSA-2024-0007.html

Scores

CVSS v3 4.3

EPSS 0.0042

EPSS Percentile 61.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

Status published

Affected Products (1)

vmware/cloud_director < 10.5.1.1

Timeline

Published Mar 07, 2024

Tracked Since Feb 18, 2026