Lucene search

K
zdiSergey Gerasimov and George webpentest Noseevich of SolidLabZDI-21-1108
HistorySep 22, 2021 - 12:00 a.m.

VMware vCenter Server Appliance Incorrect Permission Assignment Privilege Escalation Vulnerability

2021-09-2200:00:00
Sergey Gerasimov and George webpentest Noseevich of SolidLab
www.zerodayinitiative.com
19

0.0004 Low

EPSS

Percentile

16.1%

This vulnerability allows local attackers to escalate privileges on affected installations of VMware vCenter Server Appliance. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the permissions of root-owned service files. The product sets incorrect permissions on sensitive files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.