CVE-2021-22048 vulnerability in VMware Products
Published on November 10, 2021
The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.
Products Associated with CVE-2021-22048
stack.watch emails you whenever new vulnerabilities are published in VMware Cloud Foundation or VMware Vcenter Server. Just hit a watch button to start following.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.