CVE-2021-21999

2021-06-2311:16:41

vmware

www.cve.org

0.0004 Low

EPSS

Percentile

16.0%

JSON

VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf’ in an unrestricted directory which would allow code to be executed with elevated privileges.

CNA Affected

[
  {
    "product": "VMware Tools for Windows, VMware Remote Console for Windows and VMware App Volumes",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103)"
      }
    ]
  }
]