Vmware Enhanced Authentication Plug-in Eap (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-02-20. Vendor: Vmware.

CVEs of Vmware Enhanced Authentication Plug-in Eap

• CVE-2024-22250 - CVSS 7.8 (high), 2024-02-20: Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows…
• CVE-2024-22245 - CVSS 9.6 (critical), 2024-02-20: Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor…