CVE-2024-22245: Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin
Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22245?
CVE-2024-22245 is classified as a high-severity vulnerability due to its potential to allow arbitrary authentication relay and session hijacking.
How do I fix CVE-2024-22245?
To mitigate CVE-2024-22245, you should immediately disable or remove the deprecated VMware Enhanced Authentication Plug-in from all affected systems.
What are the potential impacts of CVE-2024-22245?
If exploited, CVE-2024-22245 could allow attackers to impersonate users and access sensitive information through authentication relay and session hijacking.
Is my system affected by CVE-2024-22245?
Systems utilizing the deprecated VMware Enhanced Authentication Plug-in are at risk from CVE-2024-22245.
When was CVE-2024-22245 discovered?
CVE-2024-22245 was published recently as part of VMware's ongoing security updates addressing vulnerabilities in their products.