CVE-2024-22250

—

CVSS 3.1

7.8 high

EPSS

<1%p28

Published

Feb 20, 2024 (Feb 20, 2024)

Modified

Jun 17, 2026

Description

Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.

Weakness: CWE-384
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news4 stories

Week in review: 10 cybersecurity startups to watch, admins urged to remove VMware vSphere plugin

Help Net SecurityFeb 25, 00:00 UTC · Feb 25, 2024Ransomware CVE-2024-22245 CVE-2024-22250 CVE-2024-1709+1 CVEs

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

The Hacker NewsFeb 22, 02:28 UTC · Feb 22, 2024Vulnerability CVE-2024-22245 CVE-2024-22250 CVE-2024-21726

Critical flaw found in deprecated VMware EAP. Uninstall it now

Security AffairsFeb 21, 11:37 UTC · Feb 21, 2024Ransomware CVE-2024-22245 CVE-2024-22250

VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

Help Net SecurityFeb 25, 16:34 UTC · Feb 25, 2024Vulnerability CVE-2024-22245 CVE-2024-222501