CVE-2024-38815

Summary

VMware NSX contains a content spoofing vulnerability that allows an unauthenticated attacker to craft a URL and redirect a victim to an attacker-controlled domain, leading to sensitive information disclosure [1].

Technical

Details The vulnerability stems from insufficient validation of user-controlled input, enabling an attacker to craft a malicious URL that performs a redirect to an external domain. No authentication or elevated privileges are required to exploit this issue [1].

An attacker can exploit this by sending a crafted link to a victim. Upon clicking, the victim is redirected to an attacker-controlled web page, potentially exposing sensitive information such as session tokens or credentials [1].

Impact and

Mitigation Successful exploitation could lead to information disclosure, potentially compromising user privacy and session integrity. VMware has released security updates to address this vulnerability. The advisory lists fixed versions for NSX and Cloud Foundation. Users should apply the appropriate patches as indicated. No workarounds are available [1].