CVE-2024-22274

Name of the Vulnerable Software and Affected Versions: VMware vCenter Server (affected versions not specified)

Description: The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system. A proof-of-concept (PoC) exploit has been released for this vulnerability, potentially allowing authenticated remote code execution.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.