CVE-2021-22015
EUVD-2021-918423.09.2021, 13:15
The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vmware | cloud_foundation | 3.0 ≤ 𝑥 < 5.0 |
| vmware | vcenter_server | 6.5 |
| vmware | vcenter_server | 6.7 |
| vmware | vcenter_server | 7.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References