{"id":"CVE-2024-22260","state":"PUBLISHED","title":"VMware Workspace One UEM update addresses an information exposure vulnerability. ","description":"VMware Workspace One UEM update addresses an information exposure vulnerability. \nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure.","publishedAt":"2024-06-27T20:18:58.176Z","updatedAt":"2025-03-19T17:17:41.489Z","severity":{"score":6.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","source":"vmware"},"assigner":"vmware","products":["N/A VMware Workspace One UEM"],"affected":[{"vendor":"N/A","product":"VMware Workspace One UEM","defaultStatus":"unaffected","versions":[{"version":"VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x","status":"affected"}]}],"references":["https://www.vmware.com/security/advisories/OMSA-2024-0001.html"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/22xxx/CVE-2024-22260.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-22260","state":"PUBLISHED","datePublished":"2024-06-27T20:18:58.176Z","dateUpdated":"2025-03-19T17:17:41.489Z","assignerShortName":"vmware","assignerOrgId":"dcf2e128-44bd-42ed-91e8-88f912c1401d","dateReserved":"2024-01-08T18:43:15.943Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"VMware Workspace One UEM update addresses an information exposure vulnerability. \nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure."}],"affected":[{"vendor":"N/A","product":"VMware Workspace One UEM","defaultStatus":"unaffected","versions":[{"version":"VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x","status":"affected"}]}],"references":[{"url":"https://www.vmware.com/security/advisories/OMSA-2024-0001.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"Information exposure vulnerability","lang":"en"}]}],"providerMetadata":{"shortName":"vmware","orgId":"dcf2e128-44bd-42ed-91e8-88f912c1401d","dateUpdated":"2024-06-27T20:18:58.176Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"vmware","product":"workspace_one_uem","defaultStatus":"unknown","versions":[{"version":"23.10x","status":"affected"}],"cpes":["cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"]},{"vendor":"vmware","product":"workspace_one_uem","defaultStatus":"unknown","versions":[{"version":"23.6x","status":"affected"}],"cpes":["cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"]},{"vendor":"vmware","product":"workspace_one_uem","defaultStatus":"unknown","versions":[{"version":"23.4x","status":"affected"}],"cpes":["cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"]},{"vendor":"vmware","product":"workspace_one_uem","defaultStatus":"unknown","versions":[{"version":"22.12x","status":"affected"}],"cpes":["cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-28T14:48:16.804419Z","id":"CVE-2024-22260","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-19T17:17:41.489Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.vmware.com/security/advisories/OMSA-2024-0001.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T22:43:33.664Z"}}]}}}