CVE-2021-22015
CVE-2021-22015
Vexday Risk Score
18Bajo
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
Exploit automatizable disponible (Nuclei/Metasploit).
CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit simPatch —
Ciclo de vida
21 sep 2021Exploit Metasploit disponible
23 sep 2021Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance.
Productos afectados
n/a · VMware vCenter Server, VMware Cloud Foundation