PT-2024-4540 · Vmware · Vmware Cloud Foundation+2

Guy Lederfein

·

Published

2024-06-25

·

Updated

2025-06-27

·

CVE-2024-37087

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: vCenter Server (affected versions not specified) VMware Cloud Foundation (affected versions not specified)
Description: The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-of-service condition. This issue is related to an uncontrolled resource consumption, which can be exploited by a remote attacker to cause a denial-of-service condition.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Incorrect Permission

Weakness Enumeration

CWE-400CWE-732

Related Identifiers

BDU:2024-05044
CVE-2024-37087
ZDI-24-882

Affected Products

Vmware Vcenter
Vmware Cloud Foundation
Vmware Vcenter Server