{"id":"CVE-2024-22274","revision":"3d7b0e2abb3d4a498ee4d771ff24f951","records":[{"revision":"3d7b0e2abb3d4a498ee4d771ff24f951","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-22274","aliases":[],"title":"The vCenter Server contains an authenticated remote code execution vulnerability.\u00A0A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating s…","description":"The vCenter Server contains an authenticated remote code execution vulnerability.\u00A0A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.","state":0,"publishedAt":"2024-05-21T17:29:33.899+00:00","modifiedAt":"2024-08-01T22:43:34.161+00:00","affected":[{"ecosystem":"Vendor product","name":"VMware vCenter Server","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"VMware vCenter Server\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"8.0 U2b\",\n                            \"status\": \"affected\",\n                            \"version\": \"8.0\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"lessThan\": \"7.0 U3q\",\n                            \"status\": \"affected\",\n                            \"version\": \"7.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"VMware Cloud Foundation (vCenter Server)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"VMware Cloud Foundation (vCenter Server)\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"5.1.1\",\n                            \"status\": \"affected\",\n                            \"version\": \"5.x\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"4.x\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2,"severity":"HIGH"}],"references":["https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-22274","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-22274","identifiers":["CVE-2024-22274"]},"retained":false,"historicalAffected":[]}],"coverage":[]}