PT-2024-2585 · Vmware · Vmware Sd-Wan Orchestrator

K4R1It0 · Published 2024-04-02 · Updated 2024-11-01 · CVE-2024-22248

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware SD-WAN Orchestrator (affected versions not specified)

Description The issue is related to an open redirect vulnerability. A malicious actor may redirect a victim to an attacker-controlled domain due to improper path handling, leading to sensitive information disclosure. This can allow a remote attacker to redirect a user to an arbitrary URL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2024-02645

CVE-2024-22248

Affected Products

Vmware Sd-Wan Orchestrator

References · 11

• https://bdu.fstec.ru/vul/2024-02645 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-22248 · Security Note
• https://twitter.com/CVEnew/status/1775196550291132897 · Twitter Post
• https://vuldb.com/?id.259043 · Note
• https://vmware.com/security/advisories/VMSA-2024-0008.html · Note
• https://twitter.com/The_Cyber_News/status/1776214544668635486 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024040253 · Note
• https://t.me/cvenotify/75520 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1775229693760884868 · Twitter Post
• https://twitter.com/pravin_karthik/status/1775536104273256790 · Twitter Post
• https://t.me/cvenotify/75497 · Telegram Post