CVE-2021-22043

VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files.

Score

CVSS 3.1 7.5 High

Status

Modified - security@vmware.com

Published

2022-02-16

Last modified

2024-08-03

Weaknesses

CWE-367

Affected products

• Esxi (Vmware)
• Fusion (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2022-0004.html