CVE-2021-21999
Summary
| CVE | CVE-2021-21999 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-06-23 12:15:00 UTC |
|---|
| Updated | 2022-07-12 17:42:00 UTC |
|---|
| Description | VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges. |
|---|
NVD Known Affected Configurations (CPE 2.3)
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 375665 VMware Tools Local Privilege Escalation Vulnerability (VMSA-2021-0013)
- 375922 VMware Remote Console Local Privilege Escalation Vulnerability (VMSA-2021-0013)
- 375939 VMware App Volumes Local Privilege Escalation Vulnerability (VMSA-2021-0013)
