CVE-2024-22264

VMware Avi Load Balancer updates address multiple vulnerabilities

State: Published
Severity: 7.2 High
Published: May 8, 2024
Updated: Mar 27, 2025
Reserved: Jan 8, 2024

Description

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMware Avi Load Balancer can create, modify, execute and delete files as a root user on the host system.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	vmware

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
VMware Avi Load BalancerVMware	22.1.x to before 22.1.6Affected 30.x.x to before 30.2.1Affected

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24219

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.