Vmware Enhanced Authentication Plug In (Eap)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:vmware_enhanced_authentication_plug-in_(eap):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductVmware Enhanced Authentication Plug In (Eap) (b738b4c8-0806-5141-b4de-ff7993a790ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22250 vulnerable 2026-06-08 06:29:34.216285 Session Hijack Vulnerability in Deprecated EAP Browser Plugin
HIGH (7.8)
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.
Published: 2024-02-20T17:35:23.481Z
Updated: 2024-08-27T15:18:24.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22245 vulnerable 2026-06-08 06:29:34.211046 Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin
CRITICAL (9.6)
Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).
Published: 2024-02-20T17:35:09.051Z
Updated: 2024-08-27T15:18:28.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.