Skip to content

Latest commit

 

History

History
17 lines (10 loc) · 863 Bytes

README.md

File metadata and controls

17 lines (10 loc) · 863 Bytes

CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Vendor Disclosure:

The vendor's disclosure for this vulnerability can be found here.

Requirements:

This vulnerability requires:

  • Ability to run system commands as a misconfigured sudo user or group

Proof Of Concept:

More details and the exploitation process can be found in this PDF.