KLA10454 PE vulnerabilities in MSCVMM

Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials.

Original advisories

MS bulletin

CVE-2015-0012

Related products

Microsoft-System-Center-Virtual-Machine-Manager

CVE list

CVE-2015-0012 high

KB list

3023195

3035898

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Microsoft System Center Virtual Machine Manager 2012 R2 Update Rollup 4