PT-2021-4311

CVE-2021-22015

·

Published

2021-09-22

·

Updated

2023-02-03

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions vCenter Server Appliance (affected versions not specified)
Description The vCenter Server contains multiple local privilege escalation issues due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance. The vulnerability is related to insecure management of privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ZDI-21-1106
ZDI-21-1108
Found an issue in the description? Have something to add? Feel free to write us 👾