« Volver al listado

CVE-2024-38815

Estado: AplazadaMedia (4.3)—

VMware NSX contains a content spoofing vulnerability.

An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — NSXAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-38815",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-38815",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-09T21:05:42.666547Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "VMware NSX, VMware Cloud Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "VMware NSX 4.x, VMware Cloud Foundation 5.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:vmware:nsx:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "nsx",
          "versions": [
            {
              "status": "affected",
              "version": "4.1.0",
              "lessThan": "4.2.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:nsx-t:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "nsx-t",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0",
              "lessThan": "3.2.4.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "cloud_foundation",
          "versions": [
            {
              "status": "affected",
              "version": "5.0",
              "lessThan": "Async_Patch_to_4.2.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-10-09T20:15:07.820",
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25047",
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vmware.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware NSX contains a content spoofing vulnerability. \n\nAn unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker controlled domain leading to sensitive information disclosure."
    },
    {
      "lang": "es",
      "value": "VMware NSX contiene una vulnerabilidad de suplantación de contenido. Un actor malintencionado no autenticado podría manipular una URL y redirigir a una víctima a un dominio controlado por un atacante, lo que daría lugar a la divulgación de información confidencial."
    }
  ],
  "lastModified": "2026-06-17T07:41:05.977",
  "sourceIdentifier": "security@vmware.com"
}