PT-2021-4311 · Vmware · Vcenter Server Appliance +1

🗓️ 22 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Local privilege escalation in vCenter Server Appliance lets authenticated non-admin users gain root due to insecure privilege management; no fix available.

Reporter	Title	Published	Views	Family All 24
0day.today	VMware vCenter vScalation Privilege Escalation Exploit	7 Dec 202200:00	–	zdt
GithubExploit	Exploit for Files or Directories Accessible to External Parties in Vmware Cloud_Foundation	30 Sep 202107:16	–	githubexploit
Circl	CVE-2021-22015	23 Sep 202116:29	–	circl
CNNVD	VMware vCenter Server 安全漏洞	21 Sep 202100:00	–	cnnvd
CNVD	VMware vCenter Server Local Authority Lifting Vulnerability	24 Sep 202100:00	–	cnvd
CVE	CVE-2021-22015	23 Sep 202100:00	–	cve
Cvelist	CVE-2021-22015	23 Sep 202100:00	–	cvelist
EUVD	EUVD-2021-9184	3 Oct 202520:07	–	euvd
Metasploit	VMware vCenter vScalation Priv Esc	5 Dec 202219:51	–	metasploit
NCSC	Vulnerabilities fixed in VMware vCenter Server	22 Sep 202100:00	–	ncsc

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vcenter_java_wrapper_vmon_priv_esc.rb
github	www.github.com/PenteraIO/vScalation-CVE-2021-22015
packetstormsecurity	www.packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1108
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1106
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22015
bdu	www.bdu.fstec.ru/vul/2021-04920
vmware	www.vmware.com/security/advisories/VMSA-2021-0020.html
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/669656
t	www.t.me/cibsecurity/29287

03 Feb 2023 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

EPSS0.01789