CVE-2021-22015 vulnerability in VMware Products
Published on September 23, 2021
The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance.
Products Associated with CVE-2021-22015
stack.watch emails you whenever new vulnerabilities are published in VMware Cloud Foundation or VMware Vcenter Server. Just hit a watch button to start following.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.