Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-22248

VMware SD-WAN Orchestrator contains an open redirect vulnerability.

Description

VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

N/A VMware SD-WAN Orchestrator

Default version status: unaffected

  • VMware SD-WAN Orchestrator 5.xaffected

References