QID 371526

Date Published: 2021-09-16

QID 371526: VMware NSX-T Privilege Escalation Vulnerability (VMSA-2021-0006)

VMware NSX-T Data Center provides an agile software-defined infrastructure to build cloud-native application environments.

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role-based access control) role assignment.

Affected Versions
VMware NSX-T 3.1.1

QID Detection Logic (Authenticated):
The QID checks the vulnerable version of VMware NSX-T.

Note: Unable to check the Workaround suggested by the vendor, hence QID is marked as a 'Potential'.

Successful exploitation of this issue may allow attackers with a local guest user account to assign privileges higher than their own permission level.

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as Medium - 4.6 severity.

Solution

Users are advised to apply patches provided by VMware. Further information can be obtained from VMSA-2021-0006

Workaround:
Vendor has suggested following workaround to mitigate the issue.
Do not activate local guest user and/or do not assign RBAC role with user-role assignment permission to local guest users. Please visit here for more information

Vendor References

VMSA-2021-0006 - www.vmware.com/security/advisories/VMSA-2021-0006.html

CVEs related to QID 371526

CVE-2021-21981 |

Software Advisories

Advisory ID	Software	Component	Link
VMware NSX-T 3.1.2			my.vmware.com/en/web/vmware/downloads/details?downloadGroup=NSX-T-312&productId=982&rPId=64728

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].