Privilege Escalation

2024-04-1816:57:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

virtualbox

privilege escalation

vulnerability

access controls

oracle vm

low-privileged

attacker

compromise

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations.