PT-2021-4311

CVE-2021-22015

·

تاريخ النشر

2021-09-22

·

تاريخ التحديث

2023-02-03

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions vCenter Server Appliance (affected versions not specified)
Description The vCenter Server contains multiple local privilege escalation issues due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance. The vulnerability is related to insecure management of privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-21-1106
ZDI-21-1108
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾