Privilege escalation in Vmware Nsx, Cloud Foundation

CVE-2024-38818

VMware NSX contains a local privilege escalation vulnerability.  An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

Vulnerability class: Privilege Escalation

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L.

Affected products

  • N/a Vmware Nsx, Cloud Foundation — versions VMware NSX 4.x, VMware Cloud Foundation 5.x

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-38818?
CVE-2024-38818 is a medium-severity vulnerability in Vmware Nsx, Cloud Foundation, classified under Improper Privilege Management. CVSS score: 6.7/10. Published 2024-10-09.
How severe is CVE-2024-38818?
Medium severity. CVSS v3 base score is 6.7 out of 10.