The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| — | VMware Cloud Foundation | 5.x, 4.x | |
| — | VMware vCenter Server | 8.0 – < 8.0 U2d, 7.0 – < 7.0 U3r | |
| vmware | cloud_foundation | 4.0 – < 6.0 | |
| vmware | vcenter_server | 8.0 – < 8.0u2d |
cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update2b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:8.0:update2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3i:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3j:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3k:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3l:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3m:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3n:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3o:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3p:*:*:*:*:*:*cpe:2.3:a:vmware:vcenter_server:7.0:update3q:*:*:*:*:*:*cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* ≥ 4.0 < 5.2Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.