CVE-2024-22264 HIGH

CVE-2024-22264: VMware Avi Load Balancer updates address multiple vulnerabilities

Vendor Vmware
Product VMware Avi Load Balancer
Published May 8, 2024
Last update March 27, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMware Avi Load Balancer can create, modify, execute and delete files as a root user on the host system.

Key dates

02Disclosure timeline

May 8, 2024 CVE published
March 27, 2025 Record updated