CVE-2024-22276
Medium
Description
VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/proxy server logging may be able to obtain sensitive information from URLs that are logged.
SeverityMedium
CVSS5.3
Exploit probability—
ProductVMware Cloud Director Object Storage Extension
PublishedJun 27, 2024
First seenJun 27, 2024
Weakness typeCWE-532CWE-532
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Cloud Director Object Storage Extension | VMware Cloud Director Object Storage Extension 3.0, VMware Cloud Director Object Storage Extension 2.x | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.