Lucene search

K
zdiAnonymousZDI-23-054
HistoryJan 18, 2023 - 12:00 a.m.

VMware vRealize Operations CaSA Improper Privilege Management Privilege Escalation Vulnerability

2023-01-1800:00:00
Anonymous
www.zerodayinitiative.com
17
vmware
vrealize operations
casa
privilege escalation
vulnerability
authentication
configuration
administrator command
privileged operation
arbitrary code
root

0.002 Low

EPSS

Percentile

52.4%

This vulnerability allows remote attackers to escalate privileges on affected installations of VMware vRealize Operations. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of CaSA. A crafted administrator command can trigger execution of a privileged operation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.

0.002 Low

EPSS

Percentile

52.4%