V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2021-04920
BDU
HighConfirmedExploit available

Уязвимость средства управления виртуальной инфраструктурой VMware vCenter Server, платформы виртуализации VMware Cloud Foundation связана с…

CVSS
7.8
High
EPSS
0.00
p0
Published
2021-01-01
Updated
2021-01-01
Description

Уязвимость средства управления виртуальной инфраструктурой VMware vCenter Server, платформы виртуализации VMware Cloud Foundation связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Affected products
Broadcom inc. Vmware cloud foundationBroadcom inc. Vmware cloud foundationBroadcom inc. Vmware vcenter serverBroadcom inc. Vmware vcenter serverBroadcom inc. Vmware vcenter server
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: L
Low (L)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
CVE-2021-22015
github-poc · https://github.com/PenteraIO/vScalation-CVE-2021-22015
Enterprise
Affected products
Broadcom
Vmware Cloud FoundationVmware Vcenter Server
ProductVendorStatus
vmware cloud foundationbroadcom inc.Tracked
vmware cloud foundationbroadcom inc.Tracked
vmware vcenter serverbroadcom inc.Tracked
vmware vcenter serverbroadcom inc.Tracked
vmware vcenter serverbroadcom inc.Tracked
Source databases
BDU
Related vulnerabilities
CVE-2021-22015