CVE-2024-22250 — Session Hijack Vulnerability in Deprecated EAP Browser Plugin
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can …
Published: 2024-02-20 · CVSS: 7.8 · CVSS 3.1
Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7