nvd-json-data-feeds/CVE-2024/CVE-2024-222xx/CVE-2024-22260.json

{
  "id": "CVE-2024-22260",
  "sourceIdentifier": "security@vmware.com",
  "published": "2024-06-27T21:15:13.470",
  "lastModified": "2024-06-28T10:27:00.920",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Workspace One UEM update addresses an information exposure vulnerability.\u00a0\nA malicious actor with network access to the Workspace One UEM may be \nable to perform an attack resulting in an information exposure."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "security@vmware.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 5.2
      }
    ]
  },
  "references": [
    {
      "url": "https://www.vmware.com/security/advisories/OMSA-2024-0001.html",
      "source": "security@vmware.com"
    }
  ]
}