PT-2022-2234 · Vmware · Vmware Cloud Foundation+1

Wei · Published 2022-02-15 · Updated 2022-02-25 · CVE-2021-22042

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware ESXi (affected versions not specified)

Description The issue is related to an unauthorized access vulnerability in VMware ESXi due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process may be able to access the settingsd service running as a high-privileged user. This vulnerability is associated with inadequate access control in the VMX service of the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor. Exploitation of the vulnerability may allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-863

CWE-284

Related Identifiers

BDU:2022-02320

CVE-2021-22042

Affected Products

Vmware Cloud Foundation

Vmware Esxi

References · 10

• https://osv.dev/vulnerability/CVE-2021-22042 · Vendor Advisory
• https://vmware.com/security/advisories/VMSA-2022-0004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22042 · Security Note
• https://bdu.fstec.ru/vul/2022-02320 · Security Note
• https://t.me/cvenotify/26875 · Telegram Post
• https://t.me/cibsecurity/37613 · Telegram Post
• https://t.me/true_secator/2633 · Telegram Post
• https://t.me/sysadm_in_channel/3782 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022021512 · Note
• https://t.me/cvenotify/26876 · Telegram Post