Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware vCenter Server

Default version status: unaffected

  • 8.0 to < 8.0 U2daffected
  • 7.0 to < 7.0 U3raffected

n/a VMware Cloud Foundation

Default version status: unaffected

  • 5.xaffected
  • 4.xaffected

References