CVE-2024-38818

MEDIUM
STIX 2.1 vulnerability

Record summary

CVE-2024-38818 has a selected CVSS score of 6.7 (medium).

Description

VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 9, 2024 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

VMware NSX, VMware Cloud Foundation

Default status: unaffected

CVE ListVMware NSX 4.x, VMware Cloud Foundation 5.xaffected

cloud_foundation

Browse vmware / cloud_foundation

Default status: unknown

CVE List5.0 to < Async_Patch_to_4.2.1affected

nsx

Browse vmware / nsx

Default status: unknown

CVE List4.1.0 to < 4.2.1affected

nsx-t

Browse vmware / nsx-t

Default status: unknown

CVE List3.2.0 to < 3.2.4.1affected

References

2