{"cvss":6.8,"datePublished":"2024-04-23T00:00:00Z","dateUpdated":"2024-04-23T00:00:00Z","description":"VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.","dueDate":"2024-08-20T00:00:00Z","id":"CVE-2024-37085","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"ESXi","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"MEDIUM","source":"vulncheck_kev","title":"VMware ESXi Authentication Bypass Vulnerability","vendor":"VMware"}