CVE-2021-21981

2021-04-1914:37:21

vmware

www.cve.org

vmware

nsx-t

privilege escalation

rbac

role assignment

vulnerability

local guest user

permission level

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.

CNA Affected

[
  {
    "product": "VMware NSX-T",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware NSX-T 3.1.1"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0006.html