Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-22274

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware vCenter Server

Default version status: unaffected

  • 8.0 to < 8.0 U2baffected
  • 7.0 to < 7.0 U3qaffected

n/a VMware Cloud Foundation (vCenter Server)

Default version status: unaffected

  • 5.x to < 5.1.1affected
  • 4.xaffected

References