CVE-2024-22245

CVSS 3.1: 9.6 critical
EPSS: 1%p68
Published: Feb 20, 2024 · Feb 20, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-22245 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).

Weakness: CWE-287

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

4 stories

Week in review: 10 cybersecurity startups to watch, admins urged to remove VMware vSphere plugin

Help Net SecurityFeb 25, 00:00 UTC · Feb 25, 2024RansomwareCVE-2024-22245 CVE-2024-22250 CVE-2024-1709+11 · 1 read

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

The Hacker NewsFeb 22, 02:28 UTC · Feb 22, 2024VulnerabilityCVE-2024-22245 CVE-2024-22250 CVE-2024-217262

Critical flaw found in deprecated VMware EAP. Uninstall it now

Security AffairsFeb 21, 11:37 UTC · Feb 21, 2024RansomwareCVE-2024-22245 CVE-2024-222502 · 1 read

VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

Help Net SecurityFeb 25, 16:34 UTC · Feb 25, 2024VulnerabilityCVE-2024-22245 CVE-2024-222503 · 1 read