CVE-2014-3790

Ruby vSphere Console RVC in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail...

CVE-2014-3790

The CVE-2014-3790 entry concerns VMware vCenter Server Appliance's Ruby vSphere Console (RVC). The vulnerability arises from escaping the chroot jail, enabling remote authenticated users to execute arbitrary commands as root. Documents consistently describe a privilege-escalation path via RVC tha...