CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@vmware.com

Published

2024-06-18

Last modified

2024-08-02

Weaknesses

CWE-556

Affected products

• Cloud Foundation (Vmware)
• Vcenter Server (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453