high7.2
CVE-2024-22274
The vCenter Server contains an authenticated remote code execution vulnerability.
Impact
The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 4.0 before 5.1.1 |
| Vmware | Vcenter Server | Versions 7.0, 8.0 |