CVE-2024-22239 - Aria Operations for Networks contains a local privilege escalation vulnerability

Back Back to CVE browser

HIGH

Aria Operations for Networks contains a local privilege escalation vulnerability

Published Feb 6, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain regular shell access.

Affected products

Vendor n/a Product VMware Aria Operations for Networks Default
unaffected
Affected
- VMware Aria Operations for Networks 6.x

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	VMware Aria Operations for Networks	unaffected	Affected VMware Aria Operations for Networks 6.x

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19810
Advisory
https://www.vmware.com/security/advisories/VMSA-2024-0002.html
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-19810		Advisory
https://www.vmware.com/security/advisories/VMSA-2024-0002.html		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner vmware

Published Feb 6, 2024

Updated May 15, 2025

Reserved Jan 8, 2024

Link CVE-2024-22239

CISA Vulnrichment

Updated May 8, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-22239

Red Hat

No data

ENISA EUVD

Assigner vmware

Published Feb 6, 2024

Updated May 15, 2025

Link EUVD-2024-19810

GitHub

No data