Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6www-r2fm-fcq7

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.

EPSS

Процентиль: 4%
0.0002
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.7
nvd
около 7 лет назад

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.

EPSS

Процентиль: 4%
0.0002
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-732