CVE-2024-37372 – “VMware Permission Model Inconsistent Path Prefix Handling Vulnerability”

CVE ID : CVE-2024-37372

Published : Jan. 9, 2025, 1:15 a.m. | 31 minutes ago

Description : The Permission Model assumes that any path starting with two backslashes has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

Severity: 3.6 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Share the Post:

Related Posts