« Volver al listado

CVE-2024-22260

Estado: AplazadaMedia (6.8)—

VMware Workspace One UEM update addresses an information exposure vulnerability.  A malicious actor with network access to the Workspace One UEM may be able to perform an attack resulting in an information exposure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — Workspace ONE UEMAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-22260",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-22260",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-28T14:48:16.804419Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "N/A",
          "product": "VMware Workspace One UEM",
          "versions": [
            {
              "status": "affected",
              "version": "VMware Workspace One UEM 23.10.x, VMware Workspace One UEM 23.6.x, VMware Workspace One UEM 23.4.x, VMware Workspace One UEM 22.12.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "workspace_one_uem",
          "versions": [
            {
              "status": "affected",
              "version": "23.10x"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "workspace_one_uem",
          "versions": [
            {
              "status": "affected",
              "version": "23.6x"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "workspace_one_uem",
          "versions": [
            {
              "status": "affected",
              "version": "23.4x"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:workspace_one_uem:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "workspace_one_uem",
          "versions": [
            {
              "status": "affected",
              "version": "22.12x"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-27T21:15:13.470",
  "references": [
    {
      "url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html",
      "source": "security@vmware.com"
    },
    {
      "url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Workspace One UEM update addresses an information exposure vulnerability. \nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure."
    },
    {
      "lang": "es",
      "value": "La actualización de VMware Workspace One UEM soluciona una vulnerabilidad de exposición de información. Un actor malintencionado con acceso a la red de Workspace One UEM puede realizar un ataque que resulte en una exposición de la información."
    }
  ],
  "lastModified": "2026-06-17T07:11:03.197",
  "sourceIdentifier": "security@vmware.com"
}