VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 16, 2024· Updated Oct 16, 2024

CVE-2024-38814

CVE-2024-38814

Description

An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager. Updates are available to remediate this vulnerability in affected VMware products.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • VMware/HCXcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.