VMware Enhanced Authentication Plug-in (EAP) vulnerabilities

2 known vulnerabilities in VMware Enhanced Authentication Plug-in (EAP) from VMware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  VMware Enhanced Authentication Plug-in (EAP): Session Fixation

  CVE-2024-22250Feb 20, 2024VMware

  Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the s

• 9.6 Critical severity

  VMware Enhanced Authentication Plug-in (EAP): Improper Authentication

  CVE-2024-22245Feb 20, 2024VMwareEPSS 1.26%

  Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and rel