Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-22245— Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

Quick assessment

Affected
VMware VMware Enhanced Authentication Plug-in (EAP)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

VMware Enhanced Authentication Plug-in是美国威睿（VMware）公司的VMware Horizon 客户端的一部分，用于提供额外的身份验证层，以增强对 VMware Horizon 虚拟桌面和应用程序的访问的安全性。 VMware Enhanced Authentication Plug-in存在安全漏洞，该漏洞源于存在任意身份验证中继和会话劫持漏洞，可能会允许恶意攻击者诱骗Web浏览器中安装了EAP的目标域用户请求和中继任意服务主体的服务票证名称。

CVSS 9.6 · Critical EPSS 1.26% · P69
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-22245

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin
Source: CVE Program / CVE List V5
Vulnerability Description
Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
VMware Enhanced Authentication Plug-in 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware Enhanced Authentication Plug-in是美国威睿（VMware）公司的VMware Horizon 客户端的一部分，用于提供额外的身份验证层，以增强对 VMware Horizon 虚拟桌面和应用程序的访问的安全性。 VMware Enhanced Authentication Plug-in存在安全漏洞，该漏洞源于存在任意身份验证中继和会话劫持漏洞，可能会允许恶意攻击者诱骗Web浏览器中安装了EAP的目标域用户请求和中继任意服务主体的服务票证名称。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
VMware VMware Enhanced Authentication Plug-in (EAP) All -

II. Public POCs for CVE-2024-22245

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-22245

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-22245 (1)

IV. Related Vulnerabilities

Same product: VMware Enhanced Authentication Plug-in (EAP)
Same vendor: VMware
Same weakness: CWE-287

V. Comments for CVE-2024-22245

No comments yet

Leave a comment