CVE-2024-22248

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Apr 2, 2024

Summary

CVE-2024-22248 refers to a vulnerability in VMware SD-WAN Orchestrator. This issue involves an open redirect vulnerability, meaning a malicious actor can manipulate URLs and redirect unsuspecting victims to malicious domains. The improper path handling in this software leaves sensitive information at risk of disclosure when users are redirected to these attacker-controlled sites.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share