InfoSecBulletin Cybersecurity for mankind
VMware advises users to remove the outdated Enhanced Authentication Plugin (EAP) due to the discovery of a serious authentication relay vulnerability, known as CVE-2024-22245 (CVSS score: 9.6).
A person who intends to harm could deceive a domain user with EAP installed in their web browser. This deception could lead the user to request and relay service tickets for any Active Directory Service Principal Names (SPNs).
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
VMware published an advisory about vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP). A malicious actor could exploit these vulnerabilities to trick a user with EAP into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs). According to the advisory, there are no workarounds for this vulnerability.
The VMware Enhanced Authentication Plugin (EAP) was a software plugin that allowed easy login to vSphere management interfaces using integrated Windows Authentication and smart card functionality on Windows client systems. The plugin was discontinued in 2021 with the release of vCenter Server 7.0u2.
The company fixed a critical session hijack vulnerability in EAP, known as CVE-2024-22250 (CVSS score 7.8).
“A malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.” continues the advisory.
The vulnerabilities were both reported by Ceri Coburn from Pen Test Partners.
