CVSS 7.8 · High EPSS 0,32%
Kerentanan pada vmware cloud foundation, vmware vcenter server. Skor CVSS 3.1 7.8 (High) menurut NVD.
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | cloud foundation | Versi 3.0 hingga sebelum 3.10.2.2 |
| vmware | cloud foundation | Versi 4.0 hingga sebelum 4.3 |
| vmware | vcenter server | Versi 6.5 |
| vmware | vcenter server | Versi 6.5 a |
| vmware | vcenter server | Versi 6.5 b |
| vmware | vcenter server | Versi 6.5 c |
| vmware | vcenter server | Versi 6.5 d |
| vmware | vcenter server | Versi 6.5 e |
| vmware | vcenter server | Versi 6.5 f |
| vmware | vcenter server | Versi 6.5 update1 |
| vmware | vcenter server | Versi 6.5 update1b |
| vmware | vcenter server | Versi 6.5 update1c |
| vmware | vcenter server | Versi 6.5 update1d |
| vmware | vcenter server | Versi 6.5 update1e |
| vmware | vcenter server | Versi 6.5 update1g |
| vmware | vcenter server | Versi 6.5 update2 |
| vmware | vcenter server | Versi 6.5 update2b |
| vmware | vcenter server | Versi 6.5 update2c |
| vmware | vcenter server | Versi 6.5 update2d |
| vmware | vcenter server | Versi 6.5 update2g |
| vmware | vcenter server | Versi 6.5 update3 |
| vmware | vcenter server | Versi 6.5 update3d |
| vmware | vcenter server | Versi 6.5 update3f |
| vmware | vcenter server | Versi 6.5 update3k |
| vmware | vcenter server | Versi 6.5 update3n |
| vmware | vcenter server | Versi 6.5 update3p |
| vmware | vcenter server | Versi 6.7 |
| vmware | vcenter server | Versi 6.7 a |
| vmware | vcenter server | Versi 6.7 b |
| vmware | vcenter server | Versi 6.7 d |
| vmware | vcenter server | Versi 6.7 update1 |
| vmware | vcenter server | Versi 6.7 update1b |
| vmware | vcenter server | Versi 6.7 update2 |
| vmware | vcenter server | Versi 6.7 update2a |
| vmware | vcenter server | Versi 6.7 update2c |
| vmware | vcenter server | Versi 6.7 update3 |
| vmware | vcenter server | Versi 6.7 update3a |
| vmware | vcenter server | Versi 6.7 update3b |
| vmware | vcenter server | Versi 6.7 update3f |
| vmware | vcenter server | Versi 6.7 update3g |
| vmware | vcenter server | Versi 6.7 update3j |
| vmware | vcenter server | Versi 6.7 update3l |
| vmware | vcenter server | Versi 6.7 update3m |
| vmware | vcenter server | Versi 6.7 update3n |
| vmware | vcenter server | Versi 7.0 |
| vmware | vcenter server | Versi 7.0 a |
| vmware | vcenter server | Versi 7.0 b |
| vmware | vcenter server | Versi 7.0 c |
| vmware | vcenter server | Versi 7.0 d |
| vmware | vcenter server | Versi 7.0 update1 |
| vmware | vcenter server | Versi 7.0 update1a |
| vmware | vcenter server | Versi 7.0 update1c |
| vmware | vcenter server | Versi 7.0 update1d |
| vmware | vcenter server | Versi 7.0 update2 |
| vmware | vcenter server | Versi 7.0 update2a |
| vmware | vcenter server | Versi 7.0 update2b |