Description (CNA)
Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VMware / VMware Enhanced Authentication Plug-in (EAP) | affected All |
CWE
CWE-287
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.