PT-2021-4311 · Vmware · Vcenter Server Appliance+1

George Noseevich + 3 · Published 2021-09-22 · Updated 2023-02-03 · CVE-2021-22015

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vCenter Server Appliance (affected versions not specified)

Description The vCenter Server contains multiple local privilege escalation issues due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance. The vulnerability is related to insecure management of privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Files Accessible to External Parties

Improper Privilege Management

Weakness Enumeration

CWE-552

CWE-269

Related Identifiers

BDU:2021-04920

CVE-2021-22015

ZDI-21-1106

ZDI-21-1108

Affected Products

Vmware Vcenter

Vcenter Server Appliance

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vcenter_java_wrapper_vmon_priv_esc.rb · Exploit
• 🔥 https://github.com/PenteraIO/vScalation-CVE-2021-22015 · Exploit
• 🔥 http://packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-22015 · Security Note
• https://bdu.fstec.ru/vul/2021-04920 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1108 · Security Note
• https://vmware.com/security/advisories/VMSA-2021-0020.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1106 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22015 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021092118 · Note
• https://t.me/cvenotify/39315 · Telegram Post
• https://t.me/cibsecurity/29287 · Telegram Post
• https://t.me/cybersecuritytechnologies/7387 · Telegram Post
• https://t.me/pentestingnews/31375 · Telegram Post